Ransom

Should I remove “Generic.Ransom.HydraCrypt.58DE7D8F”?

Malware Removal

The Generic.Ransom.HydraCrypt.58DE7D8F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.HydraCrypt.58DE7D8F virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generic.Ransom.HydraCrypt.58DE7D8F?


File Info:

crc32: 46CE260E
md5: 85e7b4bd1f11ee5738a564d30e8b5c39
name: 85E7B4BD1F11EE5738A564D30E8B5C39.mlw
sha1: fcd5e242384a8007cdf00b7a41999a88e3174165
sha256: db3cafd4f3c2c2db56feb5ce2ee985198d9d3ae12cf215b643ff0d7a8f73d73b
sha512: 6690c854414a67adf81a8acc5b3c0a60ee16d613e17f1c61ca50cd96a232d75a47b8b9272cdc94ec14b86a4a929a24e866de06fd70d2eb8f1dd84ac55ed9761b
ssdeep: 384:/3Mg/bqo2qPkLsrbmapd4ZobdJer91Cnopb5Iev5:Zqo2vArzpaqrer96opbiev
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: Ok.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: Ok.exe

Generic.Ransom.HydraCrypt.58DE7D8F also known as:

Elasticmalicious (high confidence)
DrWebTrojan.Encoder.10598
ClamAVWin.Ransomware.Hydracrypt-9878672-0
ALYacGeneric.Ransom.HydraCrypt.58DE7D8F
CylanceUnsafe
SangforTrojan.Win32.Save.a
BitDefenderGeneric.Ransom.HydraCrypt.58DE7D8F
Cybereasonmalicious.d1f11e
SymantecRansom.HiddenTear!g1
ESET-NOD32a variant of MSIL/Filecoder.AGP
APEXMalicious
CynetMalicious (score: 99)
KasperskyVHO:Trojan.MSIL.Fsysna.gen
MicroWorld-eScanGeneric.Ransom.HydraCrypt.58DE7D8F
Ad-AwareGeneric.Ransom.HydraCrypt.58DE7D8F
SophosML/PE-A
F-SecureHeuristic.HEUR/AGEN.1138919
BitDefenderThetaGen:NN.ZemsilF.34058.bm0@aCibSCc
McAfee-GW-EditionRansomware-FTD!85E7B4BD1F11
FireEyeGeneric.mg.85e7b4bd1f11ee57
EmsisoftGeneric.Ransom.HydraCrypt.58DE7D8F (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1138919
eGambitUnsafe.AI_Score_98%
MicrosoftRansom:MSIL/ApisCryptor.PAA!MTB
ArcabitGeneric.Ransom.HydraCrypt.58DE7D8F
ZoneAlarmHEUR:Trojan.MSIL.Fsysna.gen
GDataMSIL.Trojan-Ransom.Remind.B
McAfeeRansomware-FTD!85E7B4BD1F11
MAXmalware (ai score=80)
RisingRansom.Destructor!1.B060 (CLASSIC)
MaxSecureTrojan.Malware.121218.susgen
FortinetMSIL/Filecoder.24EB!tr.ransom

How to remove Generic.Ransom.HydraCrypt.58DE7D8F?

Generic.Ransom.HydraCrypt.58DE7D8F removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment