Ransom

How to remove “Generic.Ransom.Enigma.034ED309”?

Malware Removal

The Generic.Ransom.Enigma.034ED309 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.Enigma.034ED309 virus can do?

  • Network anomalies occured during the analysis.
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Attempts to delete volume shadow copies
  • Attempts to execute a binary from a dead or sinkholed URL
  • Installs itself for autorun at Windows startup
  • Generates some ICMP traffic
  • Uses suspicious command line tools or Windows utilities

How to determine Generic.Ransom.Enigma.034ED309?


File Info:

crc32: BCA0AA24
md5: a4a4ddc63cd27f17103df2d1816ef3e2
name: A4A4DDC63CD27F17103DF2D1816EF3E2.mlw
sha1: 4b44473d0da2463fadffd54342229501a8029170
sha256: 553a8b4768c2ad1f2899e6478410356f2700a2f2857849a59f803374481502a0
sha512: c59870ca3d4162481cc740fdfb019bd729cd2e5c193a6022de9d5bf1f85390c864686306d0f24cea70f6abefbba9aacbcb34bbd0713c9ef92236b0b94b461641
ssdeep: 6144:myAEGR5Ut9AzbbuYiBUFxSpq8O5DluQEeo:myAzSabbuYEUFxSpq8O5xVjo
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Ransom.Enigma.034ED309 also known as:

K7AntiVirusTrojan ( 004f5e1e1 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.25435
CynetMalicious (score: 99)
ALYacDeepScan:Generic.Ransom.Enigma.034ED309
CylanceUnsafe
ZillyaTrojan.Generic.Win32.1260274
AlibabaTrojan:Win32/Enigma.52695187
K7GWTrojan ( 004f5e1e1 )
Cybereasonmalicious.63cd27
CyrenW32/S-d9895c18!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.Enigma.F
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderDeepScan:Generic.Ransom.Enigma.034ED309
NANO-AntivirusTrojan.Win32.Enigma.evkfcs
MicroWorld-eScanDeepScan:Generic.Ransom.Enigma.034ED309
TencentWin32.Trojan.Raas.Auto
Ad-AwareDeepScan:Generic.Ransom.Enigma.034ED309
SophosMal/Generic-S
ComodoMalware@#11eivg7ybl8h9
BitDefenderThetaGen:NN.ZexaF.34142.puW@aGim!Pbi
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.a4a4ddc63cd27f17
EmsisoftDeepScan:Generic.Ransom.Enigma.034ED309 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.bscoa
AviraHEUR/AGEN.1126848
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.22CEBB1
MicrosoftTrojan:Win32/Tiggre!rfn
GDataDeepScan:Generic.Ransom.Enigma.034ED309
AhnLab-V3Trojan/Win32.Crynigma.C1521794
McAfeeArtemis!A4A4DDC63CD2
MAXmalware (ai score=99)
MalwarebytesMalware.AI.375118293
PandaTrj/GdSda.A
RisingTrojan.Generic@ML.100 (RDML:0BFlmvLd1L/uhIQpdGkwfg)
YandexTrojan.GenAsa!KjWEh+y1VK0
IkarusTrojan-Ransom.Enigma
FortinetW32/Generic.AP.13E0C!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Generic.Ransom.Enigma.034ED309?

Generic.Ransom.Enigma.034ED309 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment