What is “Generic.Ransom.CloudSword.7138C6E2”?

The Generic.Ransom.CloudSword.7138C6E2 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.CloudSword.7138C6E2 virus can do?

• Executable code extraction
• Creates RWX memory
• Reads data out of its own binary image
• A process created a hidden window
• Installs itself for autorun at Windows startup
• Network activity detected but not expressed in API logs
• Creates a copy of itself
• Anomalous binary characteristics

How to determine Generic.Ransom.CloudSword.7138C6E2?

File Info:
crc32: 5875CE21
md5: c006190fa78ccb993ec371958b78ab54
name: C006190FA78CCB993EC371958B78AB54.mlw
sha1: 1001769cdccd9470c8e627c8fc4027540b649a95
sha256: 57bcdee4cc181db0c6671ccdd70a978bc4fa752bd6bfc9557be713539127baee
sha512: 76edca41b4fd9a5df1424ec0ebc8d550c09a1f41a001d139cb7fed5698c5eca64c93465ba659ba0d00d5bbf077796da58f25f7efdb47771cae7985089ce0e5e4
ssdeep: 6144:FQqEePc4Ftoi/YUp5g2LvPg+1fAnPaRrhJy1oeMPoNEHAWr/Dvqv4J+Tt:F7Ft/XLLvoWoPaRS1ori8qve+B
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: rules
FileVersion: 6.3.0.6
CompanyName: cloak
LegalTrademarks: erect
Comments: conspired
ProductName: unsubstantiated
FileDescription: team
Translation: 0x0000 0x04e4

Generic.Ransom.CloudSword.7138C6E2 also known as:

How to remove Generic.Ransom.CloudSword.7138C6E2?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.