Ransom

How to remove “Generic.Ransom.HydraCrypt.ED5CD204”?

Malware Removal

The Generic.Ransom.HydraCrypt.ED5CD204 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.HydraCrypt.ED5CD204 virus can do?

  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

How to determine Generic.Ransom.HydraCrypt.ED5CD204?


File Info:

crc32: 37729D9F
md5: 5e685c7264d47dd21ebfa36a9437d142
name: 5E685C7264D47DD21EBFA36A9437D142.mlw
sha1: 0984924bd1ff568a94e16240935c03a91e7a8ddf
sha256: 02db375475c56ba5c97f602e4c2eea8cac66e08d9a31ec7efabe35210b0d0aa1
sha512: bd7b34592aecaa4184c191159acc7724a0f393efe98673a36596ff7665e9415b49238293f187a36564287e8cfdbb7478fc1759f81a3b5d9b52c3f7e47b5cf294
ssdeep: 768:bqo2mpeWxyfr9+d4mZryx7L2ksQ1QCEez:2o2Ixyfr9+dsx32XKZz
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: PENTA_RANSOMWARE.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: PENTA_RANSOMWARE.exe

Generic.Ransom.HydraCrypt.ED5CD204 also known as:

Elasticmalicious (high confidence)
DrWebTrojan.ClipBankerNET.7
ClamAVWin.Ransomware.Hydracrypt-9878672-0
ALYacGeneric.Ransom.HydraCrypt.ED5CD204
CylanceUnsafe
SangforTrojan.Win32.Save.a
CyrenW32/Azorult.D.gen!Eldorado
SymantecRansom.HiddenTear!g1
ESET-NOD32a variant of MSIL/Filecoder.AJE
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
CynetMalicious (score: 99)
KasperskyHEUR:Trojan-Ransom.MSIL.Agent.gen
BitDefenderGeneric.Ransom.HydraCrypt.ED5CD204
MicroWorld-eScanGeneric.Ransom.HydraCrypt.ED5CD204
Ad-AwareGeneric.Ransom.HydraCrypt.ED5CD204
SophosMal/Genasom-A
F-SecureHeuristic.HEUR/AGEN.1138919
BitDefenderThetaGen:NN.ZemsilF.34110.dm0@a8caobl
McAfee-GW-EditionBehavesLike.Win32.Trojan.pt
FireEyeGeneric.mg.5e685c7264d47dd2
EmsisoftGeneric.Ransom.HydraCrypt.ED5CD204 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1138919
eGambitUnsafe.AI_Score_98%
MicrosoftRansom:MSIL/Filecoder.PK!MSR
ArcabitGeneric.Ransom.HydraCrypt.ED5CD204
GDataMSIL.Trojan-Ransom.Remind.B
AhnLab-V3Ransomware/Win.FTD.C4580181
MAXmalware (ai score=86)
MalwarebytesMalware.AI.3384415825
RisingRansom.Destructor!1.B060 (CLASSIC)
IkarusTrojan-Ransom.FileCrypter
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Filecoder.AGP!tr.ransom
AVGWin32:RansomX-gen [Ransom]

How to remove Generic.Ransom.HydraCrypt.ED5CD204?

Generic.Ransom.HydraCrypt.ED5CD204 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment