Generic.Ransom.Fonix.2.3DE986EA removal

The Generic.Ransom.Fonix.2.3DE986EA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Ransom.Fonix.2.3DE986EA virus can do?

The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

How to determine Generic.Ransom.Fonix.2.3DE986EA?


File Info:
crc32: DAF32258
md5: 371e3dd5535eba361d7e16d647da6df4
name: 371E3DD5535EBA361D7E16D647DA6DF4.mlw
sha1: 916935a934c58cb2663e52e680a9322a565dac3f
sha256: f1753159e0014a40e704f2c62348dfa2fb6bb85ef671b6d838165d3ed13e8350
sha512: 41ef6bc7ec19ed66307a59b2de18a1b2d4064cc082548b158a4572d48f78eb957e1ee1c39e991d2a914cb35f20e904939384b8e8107ff293de1fa63a6cc00301
ssdeep: 12288:r4BiiZ6zbUV36ac5I2rjezp4Tx13Wlqk9:rkiOk4tQ/jSSng
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
0: [No Data]

Generic.Ransom.Fonix.2.3DE986EA also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	DeepScan:Generic.Ransom.Fonix.2.3DE986EA
ALYac	DeepScan:Generic.Ransom.Fonix.2.3DE986EA
Sangfor	Trojan.Win32.Save.a
ESET-NOD32	a variant of Win64/Filecoder.FONIX.A
APEX	Malicious
Avast	Win32:Fonix-CC [Trj]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Mucc.vho
BitDefender	DeepScan:Generic.Ransom.Fonix.2.3DE986EA
Ad-Aware	DeepScan:Generic.Ransom.Fonix.2.3DE986EA
Sophos	Generic ML PUA (PUA)
TrendMicro	Ransom.Win64.FONIX.SMTH
FireEye	Generic.mg.371e3dd5535eba36
Emsisoft	DeepScan:Generic.Ransom.Fonix.2.3DE986EA (B)
Avira	HEUR/AGEN.1141022
Microsoft	Program:Win32/Wacapew.C!ml
GData	DeepScan:Generic.Ransom.Fonix.2.3DE986EA
AhnLab-V3	Trojan/Win32.Ransomlock.C4280873
MAX	malware (ai score=89)
Malwarebytes	Ransom.Fonix
Rising	Trojan.Filecoder!8.68 (TFE:dGZlOgVxUxy10i3gnQ)
AVG	Win32:Fonix-CC [Trj]

How to remove Generic.Ransom.Fonix.2.3DE986EA?

Generic.Ransom.Fonix.2.3DE986EA removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X