Categories: Ransom

Generic.Ransom.GarrantDecrypt.B.989A58FD malicious file

The Generic.Ransom.GarrantDecrypt.B.989A58FD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.GarrantDecrypt.B.989A58FD virus can do?

A process created a hidden window
Uses Windows utilities for basic functionality
Attempts to delete volume shadow copies
Writes a potential ransom message to disk
Network activity detected but not expressed in API logs
Uses suspicious command line tools or Windows utilities

How to determine Generic.Ransom.GarrantDecrypt.B.989A58FD?


File Info:
crc32: 01DBD837md5: 67e49cfcd12103b5ef2f9f331f092dbename: 67E49CFCD12103B5EF2F9F331F092DBE.mlwsha1: 72cad5a81ce546b42844b5b8fc2ab55e99f2b5d4sha256: 58ccba4fb2b3ed8b5f92adddd6ee331a6afdedfc755145e0432a7cb324c28053sha512: 21fa0d1be0d5be2da8c4c68357e1e294503d87c21a304c5811669eaa9aba29b6cfcd077d083547e2f41269b12c6a8da5ad2ea0f1613d9a96917ea01c69fcb087ssdeep: 384:v2UsMH+SV5xjfd7IRfj1LKWQkD/e42pRwtkOEyOc0QI0rRrASD:PscR5x5kTKWQY/e42pKtkOETcfJrVtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Generic.Ransom.GarrantDecrypt.B.989A58FD also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.Ransom.GarrantDecrypt.B.989A58FD
Qihoo-360	HEUR/QVM20.1.E852.Malware.Gen
ALYac	Generic.Ransom.GarrantDecrypt.B.989A58FD
Cylance	Unsafe
Sangfor	Malware
BitDefender	Generic.Ransom.GarrantDecrypt.B.989A58FD
K7GW	Trojan ( 004f78ba1 )
CrowdStrike	win/malicious_confidence_60% (D)
Arcabit	Generic.Ransom.GarrantDecrypt.B.989A58FD
BitDefenderTheta	Gen:NN.ZexaF.34780.buW@aKj5ukl
Symantec	Ransom.Babuk
ESET-NOD32	a variant of Win32/Filecoder.NHQ
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Ransomware.Babuk-9819006-0
Kaspersky	HEUR:Trojan-Ransom.Win32.Generic
Alibaba	Trojan:Win32/Filecoder.8fecf697
Rising	Trojan.Generic@ML.82 (RDML:y5m0cDwnkvD+DJ2STsDoVQ)
Ad-Aware	Generic.Ransom.GarrantDecrypt.B.989A58FD
Sophos	ML/PE-A + Mal/EncPk-ZC
TrendMicro	TROJ_GEN.R002C0RAS21
McAfee-GW-Edition	BehavesLike.Win32.RansomPhobos.mm
FireEye	Generic.mg.67e49cfcd12103b5
Emsisoft	Trojan.FileCoder (A)
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=88)
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Ymacco.AA58
AegisLab	Trojan.Win32.Generic.j!c
ZoneAlarm	HEUR:Trojan-Ransom.Win32.Generic
GData	Generic.Ransom.GarrantDecrypt.B.989A58FD
Cynet	Malicious (score: 100)
McAfee	Artemis!67E49CFCD121
VBA32	BScope.TrojanRansom.Gen
Malwarebytes	Generic.Malware/Suspicious
TrendMicro-HouseCall	TROJ_GEN.R002C0RAS21
Ikarus	Win32.Outbreak
Fortinet	W32/FilecoderProt.F183!tr.ransom
AVG	FileRepMalware
Cybereason	malicious.cd1210
Avast	FileRepMalware
MaxSecure	Trojan.Malware.121218.susgen