What is “Generic.Ransom.LockCrypt2.0C8633BE”?

Malware Removal

The Generic.Ransom.LockCrypt2.0C8633BE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Generic.Ransom.LockCrypt2.0C8633BE virus can do?

  • Expresses interest in specific running processes
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Writes a potential ransom message to disk
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself
  • Attempts to disable UAC
  • Attempts to modify UAC prompt behavior
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generic.Ransom.LockCrypt2.0C8633BE?


File Info:

crc32: 61428C13
md5: 10ab83e9e68df159099520caba0163df
name: 10AB83E9E68DF159099520CABA0163DF.mlw
sha1: a3ea5b2f5b87026da92ceb72a821a71298e45c10
sha256: 39a8c813d8cda213be05c891b4e72ce344894ea5a8e5c7ccbeadaa749f83f6f8
sha512: 90287fcfff99e13c89f13b200d95f6fb78af8dabedafde2ca2431ffa9ce73ad9ccabcedb5809961dc7e6bc552494bed4012afa372289706f58c2142fd3385c41
ssdeep: 192:M9ote8k1WXCNc7m6mhWavEoh/w+I2i5Kk2mYqOKdUqx:M/8kMXU+m6mQu5hor2ZXqOs
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Ransom.LockCrypt2.0C8633BE also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005451b81 )
Elasticmalicious (high confidence)
DrWebTrojan.KillProc.56680
CynetMalicious (score: 100)
ALYacTrojan.Ransom.LockCrypt
CylanceUnsafe
ZillyaTrojan.AntiAV.Win32.10357
SangforTrojan.Win32.Save.a
AlibabaTrojan:Win32/Skeeyah.23889136
K7GWTrojan ( 005451b81 )
Cybereasonmalicious.9e68df
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.NPA
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGeneric.Ransom.LockCrypt2.0C8633BE
NANO-AntivirusTrojan.Win32.AntiAV.fgwaxm
MicroWorld-eScanGeneric.Ransom.LockCrypt2.0C8633BE
TencentWin32.Trojan.Raas.Auto
Ad-AwareGeneric.Ransom.LockCrypt2.0C8633BE
SophosMal/Generic-S
ComodoMalware@#2mgg8j6qfdc62
BitDefenderThetaAI:Packer.BF5CD69F1F
VIPREBehavesLike.Win32.Malware.wsc (mx-v)
McAfee-GW-EditionGenericRXGL-GB!10AB83E9E68D
FireEyeGeneric.mg.10ab83e9e68df159
EmsisoftGeneric.Ransom.LockCrypt2.0C8633BE (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.AntiAV.ang
AviraTR/ATRAPS.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.286D2DC
MicrosoftTrojan:Win32/Skeeyah.A!bit
ZoneAlarmHEUR:Trojan.Win32.AntiAV
GDataGeneric.Ransom.LockCrypt2.0C8633BE
TACHYONRansom/W32.LockCrypt.13312
AhnLab-V3Malware/Win32.Generic.C2706190
McAfeeGenericRXGL-GB!10AB83E9E68D
MAXmalware (ai score=100)
VBA32BScope.TrojanRansom.Encoder
MalwarebytesMalware.AI.3650098921
PandaTrj/GdSda.A
RisingTrojan.Generic@ML.84 (RDML:grO0MvAnvMYGptiSoPuO0w)
YandexTrojan.GenAsa!gfmzB9MvuvY
IkarusTrojan-Ransom.FileCrypter
FortinetW32/Filecoder.NPA!tr.ransom
AVGWin32:RansomX-gen [Ransom]
Paloaltogeneric.ml
Qihoo-360Win32/Backdoor.Skeeyah.HgIASQ4A

How to remove Generic.Ransom.LockCrypt2.0C8633BE?

Generic.Ransom.LockCrypt2.0C8633BE removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment