Generic.Ransom.DCRTR.6469C9D8 removal guide

The Generic.Ransom.DCRTR.6469C9D8 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.DCRTR.6469C9D8 virus can do?

Expresses interest in specific running processes
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Creates a hidden or system file
Creates a copy of itself

Related domains:

z.whorecord.xyz

redirector.gvt1.com

r8—sn-bpb5oxu-3c2r.gvt1.com

update.googleapis.com

How to determine Generic.Ransom.DCRTR.6469C9D8?


File Info:
crc32: CE915DBE
md5: 9ad0e3969f43445b2dd3dbc5a1c6e81a
name: 9AD0E3969F43445B2DD3DBC5A1C6E81A.mlw
sha1: 4f7e53126b95b18af7684e5a836f677c94fd91c4
sha256: 901db9e26ef90ff5486c7a16c54ca04c17884581f4559668fae8401634acb465
sha512: 26d1b29ab5a0713123bfc9c0c5121088e5c77eb68bb3e1e432c614d3e358b1700f3c178a1c30ea96a0c1a0fc459ac846b68d6939e74b4b51afc5fccef3616968
ssdeep: 6144:dXY1OjhldUCm2Bzb5/RsK9GDqXQYFhOAiddnGu/szDHCUPUX1IALoS:dI1OxUCm6dSK9GWXQihOAiXGu/sHCUO
type: PE32 executable (console) Intel 80386, for MS Windows, UPX compressed

Version Info:
0: [No Data]

Generic.Ransom.DCRTR.6469C9D8 also known as:

Bkav	W32.AIDetect.malware2
Cynet	Malicious (score: 100)
ALYac	Generic.Ransom.DCRTR.6469C9D8
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
BitDefender	Generic.Ransom.DCRTR.6469C9D8
Cybereason	malicious.69f434
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Filecoder.NHQ
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Generic
MicroWorld-eScan	Generic.Ransom.DCRTR.6469C9D8
Ad-Aware	Generic.Ransom.DCRTR.6469C9D8
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34738.smGfamREebji
McAfee-GW-Edition	BehavesLike.Win32.BadFile.fc
FireEye	Generic.mg.9ad0e3969f43445b
Emsisoft	Generic.Ransom.DCRTR.6469C9D8 (B)
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_100%
Arcabit	Generic.Ransom.DCRTR.6469C9D8
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Generic.Ransom.DCRTR.6469C9D8
AhnLab-V3	Malware/Win32.Generic.C4204066
Acronis	suspicious
McAfee	Artemis!9AD0E3969F43
MAX	malware (ai score=80)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Filecoder.B1CB!tr.ransom

How to remove Generic.Ransom.DCRTR.6469C9D8?

Generic.Ransom.DCRTR.6469C9D8 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generic.Ransom.DCRTR.6469C9D8 removal guide