Generic.Ransom.BTCWare.F952DF1B removal guide

The Generic.Ransom.BTCWare.F952DF1B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Ransom.BTCWare.F952DF1B virus can do?

How to determine Generic.Ransom.BTCWare.F952DF1B?


File Info:
crc32: A2D56CAE
md5: ab9c5c2ea832bb4d5a3da0d7048a2faa
name: AB9C5C2EA832BB4D5A3DA0D7048A2FAA.mlw
sha1: 50a805a74d587cbab6e38eeee63ad7b3793e1f3e
sha256: b8817615183ddb75f8768528d78b87bafadbb0dbcb8a22e8c9aeea74da18cbf7
sha512: 8346f160e2394d91bd38fdbe545d1c5d63f738872e6ed415e732adc197c2cb613aa9a01a2444c417efe87a844b4dc5ce19b275f3a05194e346076a1a212db709
ssdeep: 6144:LNp2CHcQXze40PgpETLGT+69+9FKLBhsDuyiEohA9J:R4vQDsm8aT+69+Wpydo2J
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
0: [No Data]

Generic.Ransom.BTCWare.F952DF1B also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.Ransom.BTCWare.F952DF1B
FireEye	Generic.mg.ab9c5c2ea832bb4d
ALYac	Trojan.Ransom.BTCWare
Cylance	Unsafe
Zillya	Trojan.Filecoder.Win64.19
K7AntiVirus	Trojan ( 00534a441 )
Alibaba	Ransom:Win32/Higuniel.93b0e21a
K7GW	Trojan ( 00534a441 )
Arcabit	Generic.Ransom.BTCWare.F952DF1B
Symantec	Trojan.Gen.2
TrendMicro-HouseCall	Ransom_BTCWARE.THFBFAH
Paloalto	generic.ml
Kaspersky	Trojan-Ransom.Win32.Gen.jnm
BitDefender	Generic.Ransom.BTCWare.F952DF1B
NANO-Antivirus	Trojan.Win64.Encoder.fehwne
APEX	Malicious
Tencent	Win32.Trojan.Gen.Lpbo
Ad-Aware	Generic.Ransom.BTCWare.F952DF1B
Emsisoft	Generic.Ransom.BTCWare.F952DF1B (B)
Comodo	Malware@#vuxrz46prslm
F-Secure	Trojan.TR/AD.RansomHeur.ndytr
DrWeb	Trojan.Encoder.25069
TrendMicro	Ransom_BTCWARE.THFBFAH
McAfee-GW-Edition	Generic.dvc
Sophos	Mal/Generic-S
Ikarus	Trojan-Ransom.FileCrypter
Webroot	W32.Malware.Gen
Avira	TR/AD.RansomHeur.ndytr
Antiy-AVL	Trojan[Ransom]/Win32.AGeneric
Microsoft	Ransom:Win32/Higuniel.A
ZoneAlarm	Trojan-Ransom.Win32.Gen.jnm
GData	Win32.Trojan-Ransom.Filecoder.CM
Cynet	Malicious (score: 85)
AhnLab-V3	Malware/Win64.Generic.C2406027
McAfee	Generic.dvc
Malwarebytes	Generic.Malware/Suspicious
Avast	FileRepMalware
ESET-NOD32	a variant of Win64/Filecoder.NPL
Rising	Ransom.Higuniel!8.F44A (CLOUD)
Yandex	Trojan.GenAsa!EM0GNqaMmkM
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W64/Filecoder.NPL!tr
AVG	FileRepMalware
Cybereason	malicious.ea832b
Panda	Trj/CI.A
Qihoo-360	Win32/Trojan.Ransom.4dc

How to remove Generic.Ransom.BTCWare.F952DF1B?

Generic.Ransom.BTCWare.F952DF1B removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X