Generic.Ransom.GandCrab.C3780C9C removal tips

The Generic.Ransom.GandCrab.C3780C9C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Ransom.GandCrab.C3780C9C virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid
CAPE detected the Gandcrab malware family
Anomalous binary characteristics

How to determine Generic.Ransom.GandCrab.C3780C9C?


File Info:
name: C35594DB7D7EA151EF6D.mlw
path: /opt/CAPEv2/storage/binaries/6e5ef1cec8d7fc056d3e3b38eb05cd612c5669af48e6c4040743e8a5012345b3
crc32: 7D306441
md5: c35594db7d7ea151ef6d31e72a59f1b0
sha1: 7137d956560fc26099f8a08e802cf8005a27586a
sha256: 6e5ef1cec8d7fc056d3e3b38eb05cd612c5669af48e6c4040743e8a5012345b3
sha512: a4ca9ccd49cd1d7b298f6fdba138bc9b5b17aed97048a701e36cd8cef7630fe0976c4acb8e4547b365bf304e258e86ef65f07d06e032ffd4020ed48461cea6c3
ssdeep: 1536:7ZZZZZZZZZZZZpzZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXouvVU8hbHnAoMqqU+24:RBouvVzFHVMqqDL2/LgHkc2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FF046C1EA3E1B693E1E35BB9FA743D65486E3D10BB1597DB499398462D630F02C3B302
sha3_384: 50b3913656edb3c39484197df79d40a322ef5f25d23a83b73973791093e695c5a119ce92bbfda3f8c3c6fc5859366a05
timestamp: 2018-02-20 17:28:57

Version Info:
0: [No Data]

Generic.Ransom.GandCrab.C3780C9C also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.Ransom.GandCrab.C3780C9C
ClamAV	Win.Ransomware.Gandcrab-6667060-0
FireEye	Generic.mg.c35594db7d7ea151
McAfee	GenericRXLX-RO!C35594DB7D7E
Cylance	Unsafe
VIPRE	Generic.Ransom.GandCrab.C3780C9C
Sangfor	Ransom.Win32.Gandcrab_1.se
CrowdStrike	win/malicious_confidence_100% (D)
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win32/Filecoder.GandCrab.B
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Generic.Ransom.GandCrab.C3780C9C
Rising	Ransom.GandCrab!1.B8D6 (CLASSIC)
Ad-Aware	Generic.Ransom.GandCrab.C3780C9C
Sophos	Mal/Generic-S
Comodo	Heur.Corrupt.PE@1z141z3
DrWeb	Trojan.Encoder.24384
TrendMicro	Mal_Xed-7
McAfee-GW-Edition	BehavesLike.Win32.Generic.cz
Trapmine	malicious.high.ml.score
Emsisoft	Generic.Ransom.GandCrab.C3780C9C (B)
SentinelOne	Static AI – Malicious PE
Antiy-AVL	Trojan/Generic.ASCommon.174
Microsoft	Ransom:Win32/GandCrab.AE
GData	Generic.Ransom.GandCrab.C3780C9C
Google	Detected
ALYac	Generic.Ransom.GandCrab.C3780C9C
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.1896438207
TrendMicro-HouseCall	Mal_Xed-7
Fortinet	W32/GandCrab.B!tr.ransom
Cybereason	malicious.b7d7ea

How to remove Generic.Ransom.GandCrab.C3780C9C?

Generic.Ransom.GandCrab.C3780C9C removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X