About “Generic.Ransom.LockerGoga.DADBFB6D” infection

The Generic.Ransom.LockerGoga.DADBFB6D is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Ransom.LockerGoga.DADBFB6D virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Generic.Ransom.LockerGoga.DADBFB6D?


File Info:
name: 1F02061894A084FD3835.mlw
path: /opt/CAPEv2/storage/binaries/d1f44f3b0bdd8dfecbf0af4bd58bc827b63946628f398623473adc80767d8883
crc32: 47DF8F7B
md5: 1f02061894a084fd38359a1df4be04c1
sha1: 4992c6ae0bd76a794b18798bb6594acf3f4da5ec
sha256: d1f44f3b0bdd8dfecbf0af4bd58bc827b63946628f398623473adc80767d8883
sha512: 3bd96a9829e0f2125a4455aacabc4cdd628aa36a53aa3cad400ed6e215ce8729cb96e1f6668c37c0f3c9639cecca3ac0bbc43ebfee246366c0baa8a55d3746d9
ssdeep: 24576:FjSlk+ZzG5jo8MZIQ6P8BCSqJlQJEdDxVWnfkC00BKFNKcm9W1qJsm5qbmC0vQCx:ZIvoOcm9daaFCyQCmPBQO6
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FF556B217642C636E69251B08D2CEF5E675DBD600B3447CBA3E8276E6E304C31E3799B
sha3_384: 315bc1bb065761ea60362419f8b3e13b59da2eafe85ced9eb74ccf7640dbce5b1d7f7f31ff6c9dd65d5ce45ee86161f5
ep_bytes: 1e013335d4d11d017418ff75148bceff
timestamp: 2019-01-23 22:42:50

Version Info:
0: [No Data]

Generic.Ransom.LockerGoga.DADBFB6D also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
ClamAV	Win.Ransomware.Lockergoga-6900590-0
FireEye	Generic.Ransom.LockerGoga.DADBFB6D
McAfee	GenericRXAA-FA!1F02061894A0
Malwarebytes	Malware.AI.2529616402
BitDefender	Generic.Ransom.LockerGoga.DADBFB6D
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	HEUR:Trojan-Ransom.Win32.LockerGoga.gen
MicroWorld-eScan	Generic.Ransom.LockerGoga.DADBFB6D
Rising	Ransom.Agent!1.B5C0 (CLASSIC)
Ad-Aware	Generic.Ransom.LockerGoga.DADBFB6D
Sophos	Mal/Generic-S
Zillya	Trojan.LockerGoga.Win32.11
McAfee-GW-Edition	BehavesLike.Win32.Generic.th
Emsisoft	Generic.Ransom.LockerGoga.DADBFB6D (B)
Antiy-AVL	Trojan/Generic.ASCommon.11B
Microsoft	Ransom:Win32/LockerGoga.D
GData	Win32.Trojan-Ransom.Filecoder.CP
AhnLab-V3	Malware/Win32.RL_Generic.R358122
ALYac	Generic.Ransom.LockerGoga.DADBFB6D
MAX	malware (ai score=81)
Cylance	Unsafe
Ikarus	Trojan-Ransom.LockerGoga
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Locker.GOGA!tr.ransom
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen

How to remove Generic.Ransom.LockerGoga.DADBFB6D?

Generic.Ransom.LockerGoga.DADBFB6D removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X