Categories: Ransom

Generic.Ransom.GlobeImposter.EEAF6D19 information

The Generic.Ransom.GlobeImposter.EEAF6D19 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.GlobeImposter.EEAF6D19 virus can do?

  • Installs itself for autorun at Windows startup
  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself
  • Appends a known multi-family ransomware file extension to files that have been encrypted

How to determine Generic.Ransom.GlobeImposter.EEAF6D19?


File Info:

crc32: D13F314Dmd5: 272f9be58344e72c2e6e3e2830330d43name: 272F9BE58344E72C2E6E3E2830330D43.mlwsha1: 57fea83db550e4597113df881e846537cda03586sha256: d656b632e882ccbfa7a788bc8ffe30fdfa41792381a3e0cca665502636996e9esha512: 1825b343d89e32c379eb7d8a470f5feccc25013fb146ccc998003bb98d111d5ac45b6e3ce2a310f62aa44abad3d03de0e04f27a13d1bb2623ac17d259bf6aeefssdeep: 768:EUihjk9hlg4tBLuZuZJHe4ndXxnWlHznD/VwrEQYtqVi6S9JWvZ/KWwhQMNzLmp:GjkfV+KJolntwrbDSTWvTwhQMhmpdLItype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Ransom.GlobeImposter.EEAF6D19 also known as:

Bkav W32.AIDetect.malware1
K7AntiVirus Trojan ( 00502c261 )
Lionic Trojan.Win32.Purgen.tpXr
Elastic malicious (high confidence)
CAT-QuickHeal TjnRansom.Globe.S2161599
ALYac Trojan.Ransom.Globeimposter
Malwarebytes Ransom.FileCryptor
Zillya Trojan.Filecoder.Win32.7138
Sangfor Ransom.Win32.Globeimposter_1.se2
CrowdStrike win/malicious_confidence_100% (D)
K7GW Trojan ( 00502c261 )
Cybereason malicious.58344e
BitDefenderTheta AI:Packer.34E74F361E
Cyren W32/S-f6b6bab7!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/Filecoder.FV
APEX Malicious
Avast Win32:RansomX-gen [Ransom]
Cynet Malicious (score: 100)
Kaspersky Trojan-Ransom.Win32.Purgen.ahp
BitDefender Generic.Ransom.GlobeImposter.EEAF6D19
NANO-Antivirus Trojan.Win32.Encoder.eybimv
ViRobot Trojan.Win32.Z.Filecoder.55296.A
MicroWorld-eScan Generic.Ransom.GlobeImposter.EEAF6D19
Tencent Win32.Trojan.Raas.Auto
Ad-Aware Generic.Ransom.GlobeImposter.EEAF6D19
Comodo TrojWare.Win32.Necne.AB@7l2s58
DrWeb Trojan.Encoder.24710
VIPRE Trojan.Win32.Generic!BT
TrendMicro Ransom_FAKEGLOBE.SMB
FireEye Generic.mg.272f9be58344e72c
Sophos ML/PE-A + Troj/Ransom-EVE
SentinelOne Static AI – Malicious PE
Jiangmin Trojan.Generic.bzhft
Avira HEUR/AGEN.1117723
Antiy-AVL Trojan/Generic.ASSuf.22F6A
Arcabit Generic.Ransom.GlobeImposter.EEAF6D19
SUPERAntiSpyware Ransom.Filecoder/Variant
ZoneAlarm Trojan-Ransom.Win32.Purgen.ahp
GData Generic.Ransom.GlobeImposter.EEAF6D19
TACHYON Ransom/W32.GlobeImposter.55296.B
AhnLab-V3 Trojan/Win32.Generic.C2376089
Acronis suspicious
VBA32 BScope.Trojan.Encoder
MAX malware (ai score=100)
Panda Trj/Genetic.gen
TrendMicro-HouseCall Ransom_FAKEGLOBE.SMB
Rising Ransom.GlobeImposter!1.A538 (CLASSIC)
Yandex Trojan.GenAsa!zWp8ygiHWug
Ikarus Trojan-Ransom.FileCrypter
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/Filecoder.FV!tr
AVG Win32:RansomX-gen [Ransom]
Paloalto generic.ml

How to remove Generic.Ransom.GlobeImposter.EEAF6D19?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Trojan.Generic.35601204 removal

The Trojan.Generic.35601204 is considered dangerous by lots of security experts. When this infection is active,…

16 mins ago

AIT:Trojan.Nymeria.6000 information

The AIT:Trojan.Nymeria.6000 is considered dangerous by lots of security experts. When this infection is active,…

23 mins ago

MSILHeracles.68689 (B) removal instruction

The MSILHeracles.68689 (B) is considered dangerous by lots of security experts. When this infection is…

27 mins ago

Zusy.547004 removal guide

The Zusy.547004 is considered dangerous by lots of security experts. When this infection is active,…

27 mins ago

Trojan.Win32.Agent.xbnasm removal guide

The Trojan.Win32.Agent.xbnasm is considered dangerous by lots of security experts. When this infection is active,…

32 mins ago

Zusy.541701 malicious file

The Zusy.541701 is considered dangerous by lots of security experts. When this infection is active,…

47 mins ago