Ransom

How to remove “Generic.Ransom.GandCrab.E45B74D6”?

Malware Removal

The Generic.Ransom.GandCrab.E45B74D6 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.GandCrab.E45B74D6 virus can do?

  • Executable code extraction
  • Possible date expiration check, exits too soon after checking local time
  • Creates RWX memory
  • Performs some HTTP requests
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Checks the CPU name from registry, possibly for anti-virtualization

Related domains:

ipv4bot.whatismyipaddress.com
dns1.soprodns.ru
nomoreransom.coin
nomoreransom.bit
dns2.soprodns.ru
gandcrab.bit

How to determine Generic.Ransom.GandCrab.E45B74D6?


File Info:

crc32: BC76116D
md5: 4d2e051146ec9ec0f74220fea9d630a5
name: 4D2E051146EC9EC0F74220FEA9D630A5.mlw
sha1: f85333ac33fe3b7f57613478cf68ee8fe15f9de7
sha256: 92a86074530cdd818a20c126a70ae405983adb9cffea023a07e0edfeae3bb163
sha512: 85cd078a76fd195c416b8ebba5a94f580e866e875bb9464ee84b6589c861d076bfc45cb0590e6387205296a1d02949553e1ebde52e124efb8336f9026298fbbe
ssdeep: 1536:YZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2Lkvdi:WBounVyFHpfMqqDL2/LkvdIYvQd2a
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Ransom.GandCrab.E45B74D6 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Ransom.GandCrab.E45B74D6
FireEyeGeneric.mg.4d2e051146ec9ec0
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacGeneric.Ransom.GandCrab.E45B74D6
MalwarebytesNimnul.Virus.FileInfector.DDS
VIPRETrojan.Win32.Generic!BT
K7AntiVirusTrojan ( 0053d33d1 )
BitDefenderGeneric.Ransom.GandCrab.E45B74D6
K7GWTrojan ( 005261921 )
Cybereasonmalicious.146ec9
CyrenW32/S-700f8b9d!Eldorado
SymantecRansom.GandCrab!g4
APEXMalicious
ClamAVWin.Ransomware.Gandcrab-6502432-0
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.Inject.eyyizx
TencentMalware.Win32.Gencirc.10b8bc9f
Ad-AwareGeneric.Ransom.GandCrab.E45B74D6
EmsisoftGeneric.Ransom.GandCrab.E45B74D6 (B)
ComodoTrojWare.Win32.Ransom.GandCrab.B@7kn2ff
MaxSecureTrojan-Ransom.GandCrab.C
DrWebTrojan.Encoder.31290
ZillyaTrojan.Filecoder.Win32.7162
TrendMicroRansom_GANDCRAB.SM1
McAfee-GW-EditionBehavesLike.Win32.RansomGandcrab.nm
SophosML/PE-A + Troj/GandCrab-A
JiangminRiskTool.StartPage.km
AviraTR/Dropper.Gen
GridinsoftMalware.Win32.Gen.cc!s1
ArcabitGeneric.Ransom.GandCrab.E45B74D6
SUPERAntiSpywareRansom.GandCrab/Variant
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataWin32.Trojan-Ransom.GandCrab.C
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.FileCoder.R221681
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.34590.gyY@aO66Ongi
MAXmalware (ai score=88)
VBA32BScope.Trojan.Chapak
ESET-NOD32a variant of Win32/Filecoder.GandCrab.H
TrendMicro-HouseCallRansom_GANDCRAB.SM1
RisingRansom.GandCrab!1.B8D6 (RDMK:cmRtazp7utdGcbYeNEn920GmLclV)
YandexTrojan.Agent!qZOi9rjqwEc
SentinelOneStatic AI – Malicious PE
eGambitTrojan.Generic
FortinetW32/GandCrab.B!tr.ransom
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360HEUR/QVM20.1.9E87.Malware.Gen

How to remove Generic.Ransom.GandCrab.E45B74D6?

Generic.Ransom.GandCrab.E45B74D6 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment