Categories: Ransom

How to remove “Generic.Ransom.Extractor.02301FC9”?

The Generic.Ransom.Extractor.02301FC9 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.Extractor.02301FC9 virus can do?

Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Uses Windows utilities for basic functionality
Enumerates services, possibly for anti-virtualization
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup

How to determine Generic.Ransom.Extractor.02301FC9?


File Info:
crc32: 0AB1E70Amd5: 32152c0b173c4ed6cef8ce298a3ed518name: 32152C0B173C4ED6CEF8CE298A3ED518.mlwsha1: ebccfa14d5887ac39c82a62e12a4738d6acb7896sha256: 0ff95321aff84ad99e423b8a3c29537709a3fc2c8772c74357ab4654c10e732bsha512: ee2c057c360acc4f386f6199a08c96488d1a0c805586b33d4403aa7e854eb64d462fd983c948d427dc2034c07fe68417c34c439bcabde1fbe3e65a65dbcee78assdeep: 24576:Bj4jab9pSKBHBuSSLg9K8l0xnfi8y/+uJuVGnoyJ4qbzYzVBzYzV+rr:twSC8lgquViJ4rOtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
FileVersion: 1.0.0.0ProductVersion: 1.0.0.0Translation: 0x0409 0x04e4

Generic.Ransom.Extractor.02301FC9 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 0049936e1 )
Elastic	malicious (high confidence)
ALYac	Generic.Ransom.Extractor.02301FC9
Zillya	Trojan.Filecoder.Win32.8299
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Generic.Ransom.Extractor.02301FC9
K7GW	Trojan ( 0049936e1 )
Cybereason	malicious.b173c4
BitDefenderTheta	Gen:NN.ZelphiF.34692.xP3@auNDssfi
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Filecoder.CJ
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	Trojan.Win32.Agent.amiux
Alibaba	Trojan:Win32/Filecoder.b2785884
NANO-Antivirus	Trojan.Win32.Agent.dljnwb
MicroWorld-eScan	Generic.Ransom.Extractor.02301FC9
Tencent	Win32.Trojan.Filecoder.Lfzp
Ad-Aware	Generic.Ransom.Extractor.02301FC9
Comodo	Malware@#14xx6py861kw6
VIPRE	Trojan.Win32.Generic!BT
FireEye	Generic.mg.32152c0b173c4ed6
Emsisoft	Generic.Ransom.Extractor.02301FC9 (B)
Jiangmin	Trojan/Agent.hztp
Avira	TR/FileCoder.zcrtk
Antiy-AVL	Trojan/Generic.ASMalwS.DC4CD2
Arcabit	Generic.Ransom.Extractor.02301FC9
AegisLab	Trojan.Win32.Agent.4!c
GData	Generic.Ransom.Extractor.02301FC9
VBA32	Trojan.Agent
MAX	malware (ai score=84)
Rising	Ransom.FileCryptor!8.1A7 (CLOUD)
Yandex	Trojan.GenAsa!6pVlYXprZZo
Ikarus	Trojan-Ransom.FileCrypter
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.AMIUX!tr
Panda	Trj/CI.A