Ransom

Generic.Ransom.BitcoinX2.8343770A information

Malware Removal

The Generic.Ransom.BitcoinX2.8343770A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.BitcoinX2.8343770A virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • A process attempted to delay the analysis task.
  • Sniffs keystrokes
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generic.Ransom.BitcoinX2.8343770A?


File Info:

crc32: B448BC2B
md5: 92aad29eb548c7abb316fffbfc8f8065
name: 92AAD29EB548C7ABB316FFFBFC8F8065.mlw
sha1: f2d6f1b5f9991778e2a4997e2ce77e7ed4be178e
sha256: 9e8f713b7c069761a1281d0bcc19566d23e9f72940f61e4a523369f2210364cb
sha512: 5880815167c1fb98dc8dd17fdbf708898ad6913dfcbe51b42e09bd3c194a5080f82881dfa271619588be7dedd74bc8964204ee7ec4666ede80f6820b725b0d0c
ssdeep: 6144:pz3gYRH3clfU6vKKzdF2Jurv+UbpAOsxhZRfU6vhmOuBpqUt1lcd/PCvxtYTTa1/:pMYuC2KUH2ObNsx3+2h7tV2v
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
LegalCopyright: Bitcoinx2
InternalName: BitcoinX2
FileVersion: 5.01.0001
CompanyName: Bitcoinx2
ProductName: Bitcoinx2
ProductVersion: 5.01.0001
OriginalFilename: BitcoinX2.exe

Generic.Ransom.BitcoinX2.8343770A also known as:

K7AntiVirusNetWorm ( 700000151 )
DrWebBACKDOOR.Trojan
CynetMalicious (score: 99)
McAfeeGenericRXDO-XY!92AAD29EB548
SangforSuspicious.Win32.Attribute.HighConfidence
AlibabaWorm:Win32/Generic.b6e9bdfa
K7GWNetWorm ( 700000151 )
Cybereasonmalicious.eb548c
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/VB.OTF
APEXMalicious
AvastWin32:Malware-gen
BitDefenderGeneric.Ransom.BitcoinX2.8343770A
NANO-AntivirusTrojan.Win32.BAS.eweuzt
MicroWorld-eScanGeneric.Ransom.BitcoinX2.8343770A
TencentWin32.Worm.Vb.Htcc
Ad-AwareGeneric.Ransom.BitcoinX2.8343770A
ComodoMalware@#2ht3fdchluybi
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PEJ21
McAfee-GW-EditionGenericRXDO-XY!92AAD29EB548
FireEyeGeneric.mg.92aad29eb548c7ab
EmsisoftGeneric.Ransom.BitcoinX2.8343770A (B)
AviraHEUR/AGEN.1118815
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataGeneric.Ransom.BitcoinX2.8343770A
MAXmalware (ai score=84)
MalwarebytesMalware.AI.4039039365
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0PEJ21
RisingWorm.VB!8.30 (CLOUD)
YandexTrojan.GenAsa!5iS2MV9hKcY
IkarusWorm.Win32.VB
FortinetW32/VB.OTF!tr
AVGWin32:Malware-gen

How to remove Generic.Ransom.BitcoinX2.8343770A?

Generic.Ransom.BitcoinX2.8343770A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment