Generic.Ransom.Babuk.A.91C52690 malicious file

The Generic.Ransom.Babuk.A.91C52690 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.Babuk.A.91C52690 virus can do?

Possible date expiration check, exits too soon after checking local time
A process created a hidden window
Uses Windows utilities for basic functionality
Attempts to delete volume shadow copies
Attempts to repeatedly call a single API many times in order to delay analysis time
Exhibits possible ransomware file modification behavior
Writes a potential ransom message to disk
Network activity detected but not expressed in API logs
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic.Ransom.Babuk.A.91C52690?


File Info:
crc32: A373006D
md5: 7540d846032fd69dcf7a863213e8befa
name: 7540D846032FD69DCF7A863213E8BEFA.mlw
sha1: 0cf8025ed457b54a7430f6c604e9f8b6e204087f
sha256: a52267dc795a51404cbf2a7e8e7875929783bcc62abd6b7cfd1921c938cf2756
sha512: 52dd733608981575f89c1a09ae6ae142f4204243366d1eab2d291a9f284249e7f9fc78a6c3ad0dc048003543cd40eefa9e4c80f2e6c15f4963f665fceaaea5ef
ssdeep: 1536:ohkWBeG/LEOSsrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG2Osf:mBe8dSsrQLOJgY8Zp8LHD4XWaNH71dL
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Generic.Ransom.Babuk.A.91C52690 also known as:

Elastic	malicious (high confidence)
ClamAV	Win.Ransomware.Maze-7473772-0
ALYac	Generic.Ransom.Babuk.A.91C52690
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (D)
K7GW	Trojan ( 005782fe1 )
K7AntiVirus	Trojan ( 005782fe1 )
ESET-NOD32	a variant of Win32/Filecoder.Babyk.A
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Ransom.Win32.Generic
BitDefender	Generic.Ransom.Babuk.A.91C52690
MicroWorld-eScan	Generic.Ransom.Babuk.A.91C52690
Ad-Aware	Generic.Ransom.Babuk.A.91C52690
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZexaF.34142.euW@a0wVUsc
TrendMicro	Ransom.Win32.BABUK.SMRD1
McAfee-GW-Edition	BehavesLike.Win32.Generic.lm
FireEye	Generic.mg.7540d846032fd69d
Emsisoft	Trojan.FileCoder (A)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1142556
Arcabit	Generic.Ransom.Babuk.A.91C52690
ZoneAlarm	HEUR:Trojan-Ransom.Win32.Generic
Microsoft	Ransom:Win32/Babuk.MAK!MTB
AhnLab-V3	Ransomware/Win.Babuk.R441290
Acronis	suspicious
McAfee	GenericRXNS-AS!7540D846032F
MAX	malware (ai score=81)
VBA32	BScope.TrojanRansom.Crypmod
Malwarebytes	Malware.AI.3103134655
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom.Win32.BABUK.SMRD1
Rising	Ransom.Babuk!1.D7A0 (CLASSIC)
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/FilecoderProt.F183!tr.ransom
AVG	Win32:Malware-gen

How to remove Generic.Ransom.Babuk.A.91C52690?

Generic.Ransom.Babuk.A.91C52690 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generic.Ransom.Babuk.A.91C52690 malicious file