Ransom

Generic.Ransom.Aurora.050A51D5 removal guide

Malware Removal

The Generic.Ransom.Aurora.050A51D5 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.Aurora.050A51D5 virus can do?

  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Installs itself for autorun at Windows startup

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.geoplugin.net

How to determine Generic.Ransom.Aurora.050A51D5?


File Info:

crc32: DB599B2C
md5: b6d9587fe8b4154daac1a8e84dafe0d6
name: B6D9587FE8B4154DAAC1A8E84DAFE0D6.mlw
sha1: 063fc577806b01ae58e2757845a1d11d4044acb4
sha256: c72a0ca4a938fcd8387b022fb037bcfba2ffb6da6083efb79c94c85a0e022c6a
sha512: a54e862f529c7b04e0e369bc7d2ec576130282d12256c7f2406c472e5e6d606f9a6ba8628f8fb123cc7cd1aa4aa90c35385b66d8b175d82767aa65e9338770b4
ssdeep: 3072:/GsKsUQNMropEwixYXVugyA66jO6otkity0h6oXRS1Ag0FujosHEol0X7Ru41:/GsKs9fGLA68hmkv1AO5koip1
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Ransom.Aurora.050A51D5 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 005173491 )
LionicTrojan.Win32.Generic.l!c
DrWebTrojan.Encoder.26693
ALYacTrojan.Ransom.Aurora
AlibabaTrojanSpy:Win32/Filecoder.d2f40558
K7GWTrojan ( 005173491 )
Cybereasonmalicious.fe8b41
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.NNP
APEXMalicious
AvastFileRepMetagen [Malware]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Spy.Win32.Generic
BitDefenderDeepScan:Generic.Ransom.Aurora.050A51D5
NANO-AntivirusTrojan.Win32.Filecoder.fgvtol
MicroWorld-eScanDeepScan:Generic.Ransom.Aurora.050A51D5
TencentWin32.Trojan.Raas.Auto
Ad-AwareDeepScan:Generic.Ransom.Aurora.050A51D5
SophosMal/Generic-R + Troj/Auroran-A
ComodoMalware@#srtr0rj3y8fp
BitDefenderThetaGen:NN.ZexaF.34058.pCW@aa5xqtji
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
FireEyeGeneric.mg.b6d9587fe8b4154d
EmsisoftTrojan.FileCoder (A)
SentinelOneStatic AI – Suspicious PE
JiangminTrojanSpy.Generic.axt
AviraTR/FileCoder.dngqg
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.27D4F92
MicrosoftRansom:Win32/Aurora.PI
GDataDeepScan:Generic.Ransom.Aurora.050A51D5
McAfeeArtemis!B6D9587FE8B4
MAXmalware (ai score=82)
VBA32BScope.TrojanRansom.CryFile
PandaTrj/GdSda.A
RisingTrojan.Generic@ML.93 (RDML:uo8+rbqryay4Fi8fZAzIXQ)
YandexTrojan.Filecoder!sAqAd7/uPIA
IkarusTrojan-Ransom.FileCrypter
FortinetW32/Auroran.A!tr.ransom
AVGFileRepMetagen [Malware]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Aurora.HgIASOcA

How to remove Generic.Ransom.Aurora.050A51D5?

Generic.Ransom.Aurora.050A51D5 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment