Ransom

How to remove “Generic.Ransom.Enigma.1538B565”?

Malware Removal

The Generic.Ransom.Enigma.1538B565 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.Enigma.1538B565 virus can do?

  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Attempts to delete volume shadow copies
  • Attempts to interact with an Alternate Data Stream (ADS)
  • Uses suspicious command line tools or Windows utilities

How to determine Generic.Ransom.Enigma.1538B565?


File Info:

crc32: 4B565B0A
md5: ab1a9bffb70df2e040f4197341b563c5
name: AB1A9BFFB70DF2E040F4197341B563C5.mlw
sha1: 9affc78ec89d322abf6c2fe11823405cd807126d
sha256: 7d40edaa471434d099299440a7890eff054d627db894ccf4d3453e0322263c60
sha512: 531994225fedd444df40d62b97fa8bf1d7a41be31a1401dbfaae994d0aba43384ba6802aefe0b1a1ffe0bcb525b66c3d2290ac5187be319c68adf5f758a3f85a
ssdeep: 6144:GpU/Ai2SikqNk4JrsKGPZMQ4X8gxqO7yX+K:GpX5vNk+hGPZM78gxde
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Ransom.Enigma.1538B565 also known as:

K7AntiVirusTrojan ( 004f2fe01 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.6500
CynetMalicious (score: 99)
ALYacDeepScan:Generic.Ransom.Enigma.1538B565
CylanceUnsafe
K7GWTrojan ( 004f2fe01 )
Cybereasonmalicious.fb70df
CyrenW32/S-d9895c18!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.Enigma.E
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderDeepScan:Generic.Ransom.Enigma.1538B565
NANO-AntivirusTrojan.Win32.Filecoder.evrbrb
MicroWorld-eScanDeepScan:Generic.Ransom.Enigma.1538B565
TencentWin32.Trojan.Raas.Auto
Ad-AwareDeepScan:Generic.Ransom.Enigma.1538B565
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34126.nuW@auigfHei
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.BadFile.dh
FireEyeGeneric.mg.ab1a9bffb70df2e0
EmsisoftDeepScan:Generic.Ransom.Enigma.1538B565 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.brtfn
AviraHEUR/AGEN.1126848
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.22C8C96
MicrosoftRansom:Win32/Aicat.A!ml
ArcabitDeepScan:Generic.Ransom.Enigma.1538B565
GDataDeepScan:Generic.Ransom.Enigma.1538B565
AhnLab-V3Malware/Gen.Generic.C1458735
McAfeeArtemis!AB1A9BFFB70D
MAXmalware (ai score=95)
VBA32BScope.Trojan.MulDrop
MalwarebytesMalware.AI.2684679424
PandaTrj/GdSda.A
RisingTrojan.Generic@ML.90 (RDML:TUyzeeTPOBchGOEhhDyBMg)
IkarusTrojan-Ransom.Enigma
FortinetW32/Generic.E!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Generic.Ransom.Enigma.1538B565?

Generic.Ransom.Enigma.1538B565 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment