Ransom

About “Generic.Ransom.BTCWare.BDF9689E” infection

Malware Removal

The Generic.Ransom.BTCWare.BDF9689E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.BTCWare.BDF9689E virus can do?

  • A process attempted to delay the analysis task.
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Uses Windows utilities for basic functionality
  • Attempts to delete volume shadow copies
  • Modifies boot configuration settings
  • Installs itself for autorun at Windows startup
  • Exhibits possible ransomware file modification behavior
  • Writes a potential ransom message to disk
  • Network activity detected but not expressed in API logs
  • Likely virus infection of existing system binary
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

How to determine Generic.Ransom.BTCWare.BDF9689E?


File Info:

crc32: 56A17A54
md5: 7c7e9fd7c5c8f8d03218bf8c7d9ea209
name: 7C7E9FD7C5C8F8D03218BF8C7D9EA209.mlw
sha1: 2eeb7375a1c2e7675a3b34fa62c02e91c7db481f
sha256: 72653d3a882901867143579131a6e9dff2f72a647afe21035c1deda0c4c943b0
sha512: 328b16de07fb847dee1501612ac6b6d4201618b662c4c8d5c6b8c62e5a58bf0b3a5321b4fd09aa1661605d2bdb80286500081ef0e7286611985eeb2dc0cdbd52
ssdeep: 3072:zXJ83QOpfKuVeW9DdtzfeHBj6b/8FE6zRvXLye/EQCIIM:rOVKuECJdf8Beb/J6FXJ/OI
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Generic.Ransom.BTCWare.BDF9689E also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0050b0f71 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealRansom.Betisrypt.S1080239
ALYacTrojan.Ransom.BTCWare
CylanceUnsafe
ZillyaTrojan.Crusis.Win32.342
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
Alibabavirus:Win32/InfectPE.ali2000007
K7GWTrojan ( 0050b0f71 )
Cybereasonmalicious.7c5c8f
ESET-NOD32a variant of Win32/Filecoder.BTCware.E
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Ransomware.BTCWare-6329927-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGeneric.Ransom.BTCWare.BDF9689E
NANO-AntivirusTrojan.Win32.Bitcovar.ezledx
MicroWorld-eScanGeneric.Ransom.BTCWare.BDF9689E
TencentTrojan.Win32.BTCWare.a
Ad-AwareGeneric.Ransom.BTCWare.BDF9689E
SophosMal/Generic-S + Troj/Btcware-A
ComodoMalware@#3n7aqm9oylfhw
BitDefenderThetaAI:Packer.775912581E
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_BTCWARE.I
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
FireEyeGeneric.mg.7c7e9fd7c5c8f8d0
EmsisoftGeneric.Ransom.BTCWare.BDF9689E (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.cqsnc
WebrootW32.Crusis
AviraHEUR/AGEN.1122952
Antiy-AVLTrojan/Generic.ASMalwS.26127F7
MicrosoftRansom:Win32/Betisrypt!rfn
SUPERAntiSpywareRansom.Bani/Variant
GDataWin32.Trojan-Ransom.BTCWare.F
AhnLab-V3Trojan/Win32.Scatter.C1976243
McAfeeArtemis!7C7E9FD7C5C8
MAXmalware (ai score=100)
VBA32BScope.Trojan.Agentb
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_BTCWARE.I
YandexTrojan.GenAsa!avPO/XVNMxQ
IkarusTrojan-Ransom.BTCWare
FortinetW32/Generic.AP.E45FC!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Generic.HwsBbucA

How to remove Generic.Ransom.BTCWare.BDF9689E?

Generic.Ransom.BTCWare.BDF9689E removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment