Ransom

Generic.Ransom.GandCrab.BD1657C5 information

Malware Removal

The Generic.Ransom.GandCrab.BD1657C5 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.GandCrab.BD1657C5 virus can do?

  • Authenticode signature is invalid
  • CAPE detected the Gandcrab malware family

How to determine Generic.Ransom.GandCrab.BD1657C5?


File Info:

name: A6BAD2BD41C07497BC6B.mlw
path: /opt/CAPEv2/storage/binaries/35c00e38a4a5ec9cbeaded87c660743ce6d8fad996d005aa7ae6c15cee52b14c
crc32: 078AF6FE
md5: a6bad2bd41c07497bc6bb68200b19457
sha1: 3a36d507cc84bb67972532dc7c79cbe8f2c99631
sha256: 35c00e38a4a5ec9cbeaded87c660743ce6d8fad996d005aa7ae6c15cee52b14c
sha512: 10669a42bc656aba2b1071a18d6f3f3993a0e4ef4e52a68fd27a287c05e441e5ee89b8750a7800094c199c252e724f8abf1ab122e636464f7b2b0b2112ac7879
ssdeep: 768:0dKF2nVn17Wwue9TsE8iGAufkeC8SNEMqWNUMFAHJ9E3lvdLs:MKF2nVRrJafiGA8C8SmMqqUM2LkvdL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T192634C10B6E38152F1F399BE5BB8A956806E7C302B395BCB4BD8091B5D135F12B74B23
sha3_384: 2c8effe09f68d59f950814454f757c3cb282497d55224a698c0459670bb9c85cc2c528471a9a8e1923ee4b60629de347
ep_bytes: 558bec83ec0cc745f4010000008b450c
timestamp: 2018-02-20 17:28:57

Version Info:

0: [No Data]

Generic.Ransom.GandCrab.BD1657C5 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader27.28632
MicroWorld-eScanGeneric.Ransom.GandCrab.BD1657C5
FireEyeGeneric.mg.a6bad2bd41c07497
CAT-QuickHealTrojan.Sigmal.S2139482
McAfeeRansom-Gandcrab!A6BAD2BD41C0
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7AntiVirusRansomware ( 0053d33d1 )
K7GWTrojan ( 00526c7b1 )
Cybereasonmalicious.d41c07
BitDefenderThetaGen:NN.ZexaF.34646.eyW@ayZVoth
CyrenW32/GandCrab.AR.gen!Eldorado
SymantecRansom.GandCrab!g4
ESET-NOD32a variant of Win32/Filecoder.GandCrab.H
APEXMalicious
TrendMicro-HouseCallRansom.Win32.GANDCRAB.SMIU
ClamAVWin.Ransomware.Gandcrab-6667060-0
KasperskyTrojan-Ransom.Win32.GandCrypt.jdo
BitDefenderGeneric.Ransom.GandCrab.BD1657C5
NANO-AntivirusTrojan.Win32.Inject.eyyizx
SUPERAntiSpywareRansom.GandCrab/Variant
AvastWin32:RansomX-gen [Ransom]
Ad-AwareGeneric.Ransom.GandCrab.BD1657C5
EmsisoftGeneric.Ransom.GandCrab.BD1657C5 (B)
ComodoTrojWare.Win32.Ransom.GandCrab.B@7kn2ff
VIPREGeneric.Ransom.GandCrab.BD1657C5
TrendMicroRansom.Win32.GANDCRAB.SMIU
McAfee-GW-EditionRansom-Gandcrab!A6BAD2BD41C0
Trapminesuspicious.low.ml.score
SophosMal/GandCrab-L
SentinelOneStatic AI – Malicious PE
WebrootW32.Adware.Gen
GoogleDetected
AviraHEUR/AGEN.1220853
MAXmalware (ai score=86)
Antiy-AVLTrojan/Generic.ASCommon.174
MicrosoftRansom:Win32/GandCrab.AE
GDataGeneric.Ransom.GandCrab.BD1657C5
CynetMalicious (score: 100)
AhnLab-V3Malware/Win.Ransom_gandcrab.R512914
VBA32BScope.Trojan.Chapak
ALYacGeneric.Ransom.GandCrab.BD1657C5
MalwarebytesRansom.GandCrab
RisingRansom.GandCrab!1.B8D6 (CLASSIC)
IkarusTrojan-Ransom.GandCrab
MaxSecureTrojan-Ransom.GandCrab.C
FortinetW32/GandCrab.B!tr.ransom
AVGWin32:RansomX-gen [Ransom]
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Generic.Ransom.GandCrab.BD1657C5?

Generic.Ransom.GandCrab.BD1657C5 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment