What is “Generic.Ransom.Hiddentear.A.202AD3F2”?

The Generic.Ransom.Hiddentear.A.202AD3F2 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Ransom.Hiddentear.A.202AD3F2 virus can do?

Anomalous binary characteristics

How to determine Generic.Ransom.Hiddentear.A.202AD3F2?


File Info:
crc32: 3364A677
md5: a5fe986c25eb6e974f39154d32b64434
name: A5FE986C25EB6E974F39154D32B64434.mlw
sha1: 4e37a7e6f970b7bf192b6441966142d653ea0716
sha256: b77590ca3066429310b6077d3a3664e455837d8f16980d37f4e24f3056792907
sha512: 330740789155b93b5ec117cdf28c9e3eb089bcc6351985f7e430a4cc0e6cf6911f0580d43f901985ab78fd1c0ff7224d8a129d6c44248127f82d81b4171e351b
ssdeep: 384:RjhgSNMvPfIOV2Zy7O/Mzq0OWfSlxAXagzJ6:RlNSKEgyK4s
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2020
Assembly Version: 1.0.0.0
InternalName: blocky.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: blocky
ProductVersion: 1.0.0.0
FileDescription: blocky
OriginalFilename: blocky.exe

Generic.Ransom.Hiddentear.A.202AD3F2 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.10598
MicroWorld-eScan	Generic.Ransom.Hiddentear.A.202AD3F2
FireEye	Generic.mg.a5fe986c25eb6e97
McAfee	Ransomware-FTD!A5FE986C25EB
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 700000121 )
BitDefender	Generic.Ransom.Hiddentear.A.202AD3F2
K7GW	Trojan ( 700000121 )
CrowdStrike	win/malicious_confidence_60% (D)
BitDefenderTheta	Gen:NN.ZemsilF.34608.bm0@a4iwlzc
Cyren	W32/Ransom.IQ.gen!Eldorado
Symantec	Ransom.HiddenTear!g1
TrendMicro-HouseCall	Ransom_CRYPTEAR.SM0
ClamAV	Win.Ransomware.Hiddentear-9752356-0
Kaspersky	HEUR:Trojan-Ransom.Win32.Generic
Rising	Ransom.HiddenTear!1.C60C (CLASSIC)
Ad-Aware	Generic.Ransom.Hiddentear.A.202AD3F2
Emsisoft	Generic.Ransom.Hiddentear.A.202AD3F2 (B)
F-Secure	Heuristic.HEUR/AGEN.1138919
TrendMicro	Ransom_CRYPTEAR.SM0
McAfee-GW-Edition	Ransomware-FTD!A5FE986C25EB
Sophos	Troj/Cryptear-A
Ikarus	Trojan-Ransom.FileCrypter
Avira	HEUR/AGEN.1138919
Microsoft	Ransom:MSIL/Ryzerlo.A
Arcabit	Generic.Ransom.Hiddentear.A.202AD3F2
ZoneAlarm	HEUR:Trojan-Ransom.Win32.Generic
GData	MSIL.Trojan-Ransom.Cryptear.H
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.RL_Generic.C4303608
ALYac	Generic.Ransom.Hiddentear.A.202AD3F2
MAX	malware (ai score=87)
Malwarebytes	Ransom.HiddenTear
APEX	Malicious
ESET-NOD32	a variant of MSIL/Filecoder.Y
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/Filecoder.AK!tr.ransom

How to remove Generic.Ransom.Hiddentear.A.202AD3F2?

Generic.Ransom.Hiddentear.A.202AD3F2 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X