Ransom

About “Generic.Ransom.GandCrab.DBD30577” infection

Malware Removal

The Generic.Ransom.GandCrab.DBD30577 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.GandCrab.DBD30577 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Checks the CPU name from registry, possibly for anti-virtualization

Related domains:

ipv4bot.whatismyipaddress.com
dns1.soprodns.ru
nomoreransom.coin
nomoreransom.bit
dns2.soprodns.ru
gandcrab.bit

How to determine Generic.Ransom.GandCrab.DBD30577?


File Info:

crc32: 895220D7
md5: 673d84f7cb2424740a0da6b0877827d9
name: 673D84F7CB2424740A0DA6B0877827D9.mlw
sha1: b46815149e3d94b07b4d823688559017e0943a40
sha256: 448df2c6e7f44a498e9e2094c7f3a192f9b69e9884094b7307bacbce8d11e3bb
sha512: fafc769194f10c655fdac778ed72133f5221299252617446d044641f2e30a1ad983660f78d3b1c3e120767ced0cea52b47809f7cfee5e6f4129973f82239d199
ssdeep: 1536:lZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2Lkvd:5BounVyFHpfMqqDL2/Lkvd
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Ransom.GandCrab.DBD30577 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.31290
MicroWorld-eScanGeneric.Ransom.GandCrab.DBD30577
FireEyeGeneric.mg.673d84f7cb242474
CAT-QuickHealTrojan.Mauvaise.SL1
Qihoo-360HEUR/QVM20.1.9D5B.Malware.Gen
McAfeeRansom-Gandcrab!673D84F7CB24
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforWin.Ransomware.Gandcrab-6667060-0
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderGeneric.Ransom.GandCrab.DBD30577
K7GWTrojan ( 00526c7b1 )
K7AntiVirusTrojan ( 0053d33d1 )
BitDefenderThetaGen:NN.ZexaF.34590.eyW@aO66Ongi
CyrenW32/S-700f8b9d!Eldorado
SymantecRansom.GandCrab!g4
TrendMicro-HouseCallRansom.Win32.GANDCRAB.SMIU
AvastWin32:RansomX-gen [Ransom]
ClamAVWin.Ransomware.Gandcrab-6502432-0
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.Inject.eyyizx
RisingRansom.GandCrab!1.B8D6 (RDMK:cmRtazp7utdGcbYeNEn920GmLclV)
Ad-AwareGeneric.Ransom.GandCrab.DBD30577
SophosML/PE-A + Troj/GandCrab-A
ComodoTrojWare.Win32.Ransom.GandCrab.B@7kn2ff
F-SecureTrojan.TR/Dropper.Gen
ZillyaTrojan.Filecoder.Win32.7162
TrendMicroRansom.Win32.GANDCRAB.SMIU
McAfee-GW-EditionBehavesLike.Win32.RansomGandcrab.kh
EmsisoftGeneric.Ransom.GandCrab.DBD30577 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.bzhzc
AviraTR/Dropper.Gen
Antiy-AVLHackTool/Win32.Inject
MicrosoftRansom:Win32/Gandcrab
GridinsoftMalware.Win32.Gen.cc!s1
ArcabitGeneric.Ransom.GandCrab.DBDD7771
SUPERAntiSpywareRansom.GandCrab/Variant
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataWin32.Trojan-Ransom.GandCrab.C
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.FileCoder.R221681
Acronissuspicious
VBA32BScope.Trojan.Chapak
ALYacGeneric.Ransom.GandCrab.DBD30577
MAXmalware (ai score=81)
MalwarebytesRansom.GandCrab
PandaTrj/Genetic.gen
APEXMalicious
ESET-NOD32a variant of Win32/Filecoder.GandCrab.H
TencentMalware.Win32.Gencirc.10b0b456
YandexTrojan.GenAsa!N5wkFSylebY
IkarusTrojan-Ransom.GandCrab
eGambitTrojan.Generic
FortinetW32/GandCrab.B!tr.ransom
AVGWin32:RansomX-gen [Ransom]
MaxSecureTrojan-Ransom.GandCrab.C

How to remove Generic.Ransom.GandCrab.DBD30577?

Generic.Ransom.GandCrab.DBD30577 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment