Categories: Ransom

Should I remove “Generic.Ransom.GandCrab.7B341FCE”?

The Generic.Ransom.GandCrab.7B341FCE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.GandCrab.7B341FCE virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Authenticode signature is invalid
Uses Windows utilities for basic functionality
CAPE detected the Gandcrab malware family
Checks the CPU name from registry, possibly for anti-virtualization
Attempts to modify proxy settings
Anomalous binary characteristics

How to determine Generic.Ransom.GandCrab.7B341FCE?


File Info:
name: 8FF93A95778E80D4E834.mlwpath: /opt/CAPEv2/storage/binaries/d8f48d251f563882b7d3e80c8028e03e1463be80edcb7536fa38924e4ce6ba03crc32: 0EE845F7md5: 8ff93a95778e80d4e83429ad3d2926f5sha1: 5ebf94b43a51508403da9a87384f37eb982f0fddsha256: d8f48d251f563882b7d3e80c8028e03e1463be80edcb7536fa38924e4ce6ba03sha512: d0b127f874d38274694a4859221769c95bf0db3adbea6f6d3654f9c5da9d13a65579cb20ba78942606b1b6e151a1c477b71ee51c1141b6525167d207da89edd8ssdeep: 12288:nTOnOqn6c9w15ADLQt2szdI4w3ppjpSdUy:TF+6cevUQt1zJw3ppj8dUytype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1DBC48E60EE800217DE8367BFBC7255D2A93C9610530122A9E59E13AD2B471DCD37EFADsha3_384: ee0872a471354ef6b3022c13ed0e514bec011988681a58e62f68abb89172bac61d0b7ecd9b00863f4898172561ab76beep_bytes: 558bece8a8fdffff6a00ff1568914000timestamp: 2018-02-03 18:58:37
Version Info:
0: [No Data]

Generic.Ransom.GandCrab.7B341FCE also known as:

Bkav	W32.AIDetect.malware1
DrWeb	Trojan.Encoder.24384
MicroWorld-eScan	Generic.Ransom.GandCrab.7B341FCE
FireEye	Generic.mg.8ff93a95778e80d4
CAT-QuickHeal	Trojan.Mauvaise.SL1
ALYac	Generic.Ransom.GandCrab.7B341FCE
Cylance	Unsafe
Sangfor	Ransom.Win32.Gandcrab_1.se
K7AntiVirus	Ransomware ( 0053d33d1 )
K7GW	Ransomware ( 0053d33d1 )
Cybereason	malicious.5778e8
BitDefenderTheta	Gen:NN.ZexaF.34646.JyZ@a0vEZzji
VirIT	Trojan.Win32.Encoder.BKBW
Symantec	Ransom.GandCrab
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Filecoder.GandCrab.H
APEX	Malicious
ClamAV	Win.Ransomware.Gandcrab-6667060-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Generic.Ransom.GandCrab.7B341FCE
NANO-Antivirus	Trojan.Win32.Encoder.eykzmb
Avast	Win32:RansomX-gen [Ransom]
Tencent	Trojan.Win32.Gandcrab.e
Ad-Aware	Generic.Ransom.GandCrab.7B341FCE
Sophos	Troj/GandCrab-A
Comodo	TrojWare.Win32.Ransom.GandCrab.B@7kn2ff
VIPRE	Generic.Ransom.GandCrab.7B341FCE
McAfee-GW-Edition	BehavesLike.Win32.Generic.hm
Trapmine	suspicious.low.ml.score
Emsisoft	Trojan.Agent (A)
Ikarus	Trojan-Ransom.GandCrab
GData	Win32.Trojan-Ransom.GandCrab.C
Jiangmin	Trojan.Generic.bzloj
Webroot	W32.Trojan.Gen
Google	Detected
Avira	TR/Crypt.XPACK.Gen3
MAX	malware (ai score=85)
Antiy-AVL	Trojan/Generic.ASMalwS.4F71
ViRobot	Trojan.Win32.GandCrab.75264
Microsoft	Ransom:Win32/GandCrab.E
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Gandcrab.R293418
McAfee	GenericRXDY-EJ!8FF93A95778E
VBA32	BScope.Trojan.Chapak
Malwarebytes	Ransom.GandCrab
Rising	Ransom.GandCrab!1.B8D6 (CLASSIC)
Yandex	Trojan.GenAsa!Tj3lAktP/7c
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/GandCrab.B!tr.ransom
AVG	Win32:RansomX-gen [Ransom]
CrowdStrike	win/malicious_confidence_100% (D)