Ransom

Generic.Ransom.GlobeImposter.4BE08F80 malicious file

Malware Removal

The Generic.Ransom.GlobeImposter.4BE08F80 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.GlobeImposter.4BE08F80 virus can do?

  • Installs itself for autorun at Windows startup
  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Likely virus infection of existing system binary
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generic.Ransom.GlobeImposter.4BE08F80?


File Info:

crc32: AF060EBA
md5: 49a1366d1487842b3da67dde3af0abab
name: 49A1366D1487842B3DA67DDE3AF0ABAB.mlw
sha1: 58ce35b924f189003ce7e4b9cbf27d02fe33a297
sha256: 09e2224fae9869e69df3491c128a01cfabff6c45aa7a538fbaa83d88a7e9176a
sha512: 82c574cc953e76af6d1df9bce615781a895e987ec5b540a3d15cfd34c5fd3ebb8e6a83ffedd5bd6e177fa385bf7b522320a0cf4361ca4b6db8b3e1a91a4d927f
ssdeep: 768:eKlvuye1kVtGBk6P/v7nWlHznbkVwrEKD9yDwxVSHrowNI2tG6o/t84B5QNCV:xeytM3alnawrRIwxVSHMweio3q
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Ransom.GlobeImposter.4BE08F80 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00502c261 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.11539
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacTrojan.Ransom.GlobeImposter
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 00502c261 )
Cybereasonmalicious.d14878
CyrenW32/S-0a10191d!Eldorado
SymantecRansom.Cryptolocker
ESET-NOD32a variant of Win32/Filecoder.FV
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
ClamAVWin.Ransomware.Globeimposter-6991673-1
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGeneric.Ransom.GlobeImposter.4BE08F80
NANO-AntivirusTrojan.Win32.Encoder.faecqn
ViRobotTrojan.Win32.Ransom.75776.B
SUPERAntiSpywareRansom.FileCoder/Variant
MicroWorld-eScanGeneric.Ransom.GlobeImposter.4BE08F80
TencentWin32.Trojan.Raas.Auto
Ad-AwareGeneric.Ransom.GlobeImposter.4BE08F80
SophosML/PE-A + Troj/Ransom-EVE
ComodoTrojWare.Win32.Necne.AB@7l2s58
BitDefenderThetaAI:Packer.D847DCEE1E
TrendMicroRansom_FAKEGLOBE.SMB
McAfee-GW-EditionBehavesLike.Win32.Generic.qm
FireEyeGeneric.mg.49a1366d1487842b
EmsisoftGeneric.Ransom.GlobeImposter.4BE08F80 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.cblhx
WebrootW32.Ransom.Globeimposter
AviraHEUR/AGEN.1117723
MicrosoftRansom:Win32/Filecoder.RB!MSR
AegisLabTrojan.Win32.Generic.4!c
GDataGeneric.Ransom.GlobeImposter.4BE08F80
AhnLab-V3Trojan/Win32.FileCoder.R228072
Acronissuspicious
McAfeeGlobelmposter!49A1366D1487
MAXmalware (ai score=99)
VBA32BScope.Trojan.Encoder
MalwarebytesRansom.GlobeImposter
PandaTrj/Genetic.gen
TrendMicro-HouseCallRansom_FAKEGLOBE.SMB
RisingTrojan.Necne!1.A538 (CLOUD)
YandexTrojan.GenAsa!5gkkdOe61ic
IkarusTrojan-Ransom.GlobeImposter
FortinetW32/Filecoder.FV!tr
AVGWin32:RansomX-gen [Ransom]
Paloaltogeneric.ml

How to remove Generic.Ransom.GlobeImposter.4BE08F80?

Generic.Ransom.GlobeImposter.4BE08F80 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment