Categories: Ransom

About “Generic.Ransom.BitcoinX2.C04688C7” infection

The Generic.Ransom.BitcoinX2.C04688C7 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.BitcoinX2.C04688C7 virus can do?

Executable code extraction
A process attempted to delay the analysis task.
At least one IP Address, Domain, or File Name was found in a crypto call
Sniffs keystrokes
Installs itself for autorun at Windows startup
Anomalous binary characteristics

How to determine Generic.Ransom.BitcoinX2.C04688C7?


File Info:
crc32: EE0FF718md5: 3b2871300bfbf6625b1418cab8f9fc63name: 3B2871300BFBF6625B1418CAB8F9FC63.mlwsha1: 4175ab618877b4f8550efc03f3ba3c11cabffaa6sha256: d783cf538391adf7c046171fd5c241bee9ee3d03b3a809cef5f199b3817577f4sha512: b48be27fee568e9b9217464b4e7d393a7173ffd973aba5535fc0cb4737eb88029bb8e4974e9186ec2bdd47a9d3df0bfdcd13d5c3044b798cf4bf20cfde84a81essdeep: 6144:7enUxNDsjRH/clfU6vKKz+F2Jurv+HE4KpH1cl4a1yyhLohZRfU6vhm:7en+Dg2C2KUu2ZE3pVcl4Oto3+2htype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0409 0x04b0InternalName: BBFileVersion: 5.01.0001CompanyName: PProductName: BitProductVersion: 5.01.0001OriginalFilename: BB.exe

Generic.Ransom.BitcoinX2.C04688C7 also known as:

K7AntiVirus	P2PWorm ( 0052362d1 )
Lionic	Trojan.Win32.Generic.4!c
CAT-QuickHeal	Worm.Vb.S1950167
ALYac	Generic.Ransom.BitcoinX2.C04688C7
K7GW	P2PWorm ( 0052362d1 )
Cybereason	malicious.00bfbf
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/VB.OTF
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Email-Worm.Win32.VB.vxa
BitDefender	Generic.Ransom.BitcoinX2.C04688C7
NANO-Antivirus	Trojan.Win32.VB.ewusyh
MicroWorld-eScan	Generic.Ransom.BitcoinX2.C04688C7
Tencent	Win32.Worm-email.Vb.Ljue
Ad-Aware	Generic.Ransom.BitcoinX2.C04688C7
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZevbaF.34170.Em0@ae0!kMhi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.VBObfus.gh
FireEye	Generic.mg.3b2871300bfbf662
Emsisoft	Generic.Ransom.BitcoinX2.C04688C7 (B)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1122147
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Generic.Ransom.BitcoinX2.C04688C7
McAfee	GenericRXDS-XI!3B2871300BFB
MAX	malware (ai score=94)
VBA32	BScope.Worm.VB
Malwarebytes	Malware.AI.4039039365
Panda	Trj/GdSda.A
Ikarus	Worm.Win32.VB
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/VB.OTF!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml