Ransom

How to remove “Generic.Ransom.GandCrab.7691BF15”?

Malware Removal

The Generic.Ransom.GandCrab.7691BF15 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.GandCrab.7691BF15 virus can do?

  • The executable is compressed using UPX
  • Exhibits possible ransomware file modification behavior
  • Writes a potential ransom message to disk
  • Likely virus infection of existing system binary

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generic.Ransom.GandCrab.7691BF15?


File Info:

crc32: 84DD9B45
md5: 7854d1bb581b30b30585972c4cdcbc2a
name: 7854D1BB581B30B30585972C4CDCBC2A.mlw
sha1: 93699befb585033edcaab2b7213d972aac7d83e0
sha256: a3b524a6c5e2893da44b74f846618ed2249f87a4d6e3c19ca42c47e7c2eac0ee
sha512: 15b16838027695ab85d3cf3d6af055c6e422f66f7341621b16fce3f2034b8ee0a43b138232e6c3ad0ea32d1fcf4077a1617932ed65c5083f0fb8ca8a2f0460a4
ssdeep: 768:zYZVFCbn27DjrH/4HRmmj70aT67qpsP1itS/UQSC:sZVYb2j6Rmmj70akquNuQS
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

0: [No Data]

Generic.Ransom.GandCrab.7691BF15 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005655441 )
LionicTrojan.Win32.Malicious.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.30577
CynetMalicious (score: 100)
ALYacTrojan.Ransom.DEATHRansom
CylanceUnsafe
ZillyaTrojan.Filecoder.Win32.11915
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
AlibabaRansom:Win32/generic.ali2000010
K7GWTrojan ( 005655441 )
Cybereasonmalicious.b581b3
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.DeathRansom.B
APEXMalicious
AvastWin32:Trojan-gen
KasperskyTrojan.Win32.Zudochka.ejp
BitDefenderDeepScan:Generic.Ransom.GandCrab.7691BF15
NANO-AntivirusTrojan.Win32.Encoder.gvlkap
MicroWorld-eScanDeepScan:Generic.Ransom.GandCrab.7691BF15
TencentWin32.Trojan.Zudochka.Ahom
Ad-AwareDeepScan:Generic.Ransom.GandCrab.7691BF15
SophosMal/Generic-S
ComodoPacked.Win32.MUPX.Gen@24tbus
BitDefenderThetaGen:NN.ZexaF.34050.duW@aG2FrWl
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.qm
FireEyeGeneric.mg.7854d1bb581b30b3
EmsisoftDeepScan:Generic.Ransom.GandCrab.7691BF15 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Zudochka.er
WebrootW32.Trojan.Gen
AviraTR/Dropper.Gen
eGambitUnsafe.AI_Score_98%
Antiy-AVLTrojan/Generic.ASMalwS.2FDD3F7
MicrosoftTrojan:Win32/Trickbot!ml
ZoneAlarmTrojan.Win32.Zudochka.ejp
GDataDeepScan:Generic.Ransom.GandCrab.7691BF15
AhnLab-V3Malware/Win32.Generic.C4076766
Acronissuspicious
McAfeeGenericRXKB-LT!7854D1BB581B
MAXmalware (ai score=85)
VBA32BScope.Exploit.UAC
PandaTrj/GdSda.A
IkarusTrojan-Ransom.DeathRansom
FortinetW32/DeathRansom.B!tr.ransom
AVGWin32:Trojan-gen
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Zudochka.HxMBLqQA

How to remove Generic.Ransom.GandCrab.7691BF15?

Generic.Ransom.GandCrab.7691BF15 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment