What is "Generic.Ransom.Hiddentear.A.B1F40105"?

The Generic.Ransom.Hiddentear.A.B1F40105 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.Hiddentear.A.B1F40105 virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic.Ransom.Hiddentear.A.B1F40105?


File Info:
crc32: 21DC3099
md5: a88351697d27927985c15e4b6bdcf1c0
name: A88351697D27927985C15E4B6BDCF1C0.mlw
sha1: b62ec50cfec841ae376f8a5444c487bd819da65b
sha256: dac17156d26c6ee7332c047b4f3f9692a0f5773ef83afd4c0011cd45770e4af7
sha512: faba221b74bd2010abae1437d6179fbb7fbb0f03f22aa1a28a03087172b5cc5c086835eeb10a61bba7ad74a4feea3b5e24f2d9efe01cbfd48b11e7b3fa5eccbb
ssdeep: 3072:q/hERxjEL7hhf7A+ez7zVcc7FNA+K61boIbSd17XWb+nbZ5maLyeoI3MuyVnfai:1I7hhf7A+ez7BcMLAUrbSdtS+nbCYyK
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: Saruman.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Saruman
ProductVersion: 1.0.0.0
FileDescription: Saruman
OriginalFilename: Saruman.exe

Generic.Ransom.Hiddentear.A.B1F40105 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.EncoderNET.22
ClamAV	Win.Ransomware.Hiddentear-9872794-0
ALYac	Generic.Ransom.Hiddentear.A.B1F40105
Sangfor	Trojan.Win32.Save.a
BitDefender	Generic.Ransom.Hiddentear.A.B1F40105
Cybereason	malicious.97d279
ESET-NOD32	a variant of MSIL/Spy.Agent.BYF
APEX	Malicious
Kaspersky	Trojan-Banker.MSIL.Evital.gen
MicroWorld-eScan	Generic.Ransom.Hiddentear.A.B1F40105
Ad-Aware	Generic.Ransom.Hiddentear.A.B1F40105
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZemsilF.34050.im0@a0EXHPk
FireEye	Generic.Ransom.Hiddentear.A.B1F40105
Emsisoft	Generic.Ransom.Hiddentear.A.B1F40105 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_94%
Microsoft	Trojan:Win32/AgentTesla!ml
Arcabit	Generic.Ransom.Hiddentear.A.B1F40105
ZoneAlarm	Trojan-Banker.MSIL.Evital.gen
GData	MSIL.Trojan-Stealer.DarkStealer.A
MAX	malware (ai score=88)
Malwarebytes	Spyware.PasswordStealer.MSIL
Rising	Stealer.Agent!1.B723 (CLASSIC)
Ikarus	Trojan.MSIL.Spy
Qihoo-360	HEUR/QVM03.0.BC1B.Malware.Gen

How to remove Generic.Ransom.Hiddentear.A.B1F40105?

Generic.Ransom.Hiddentear.A.B1F40105 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Generic.Ransom.Hiddentear.A.B1F40105”?