Generic.Ransom.MBRLock.9B8F77C8 malicious file

The Generic.Ransom.MBRLock.9B8F77C8 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Ransom.MBRLock.9B8F77C8 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Uses Windows utilities for basic functionality
Attempts to restart the guest VM

How to determine Generic.Ransom.MBRLock.9B8F77C8?


File Info:
crc32: 4212D2B1
md5: 75bd7b3bb5700af31fc3f78bb0370e97
name: 75BD7B3BB5700AF31FC3F78BB0370E97.mlw
sha1: 899b935d6aa96681d44515689e73cb4f57994046
sha256: 2f56a9a96e0f1bba7bdbd670df22892e9b0a3b155f728e9251a12d6c967b3aa2
sha512: f56324faaf6ef67c4f6b231299e5ad039624101bd3b75e0ba1c49f1814e01c5c1e846f9be1d885d89d5116d1709b5eabc1890e540ecea83fb3995f0bbbaa5b64
ssdeep: 12288:LkSNdRBwHVTjMcGUkdOBk0w8qta2Jc43FOAvKk+VX:LkERBw1TjPGUY6vca2ykFOFfVX
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: x5dddx5948 x7248x6743x6240x6709
FileVersion: 1.0.0.0
CompanyName: x5dddx5948
Comments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.eyuyan.com)
ProductName: x6613x8bedx8a00x7a0bx5e8f
ProductVersion: 1.0.0.0
FileDescription: x6613x8bedx8a00x7a0bx5e8f
Translation: 0x0804 0x04b0

Generic.Ransom.MBRLock.9B8F77C8 also known as:

K7AntiVirus	Trojan ( 005246d51 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Generic.Ransom.MBRLock.9B8F77C8
Cylance	Unsafe
Sangfor	Win.Malware.Zusy-6840460-0
CrowdStrike	win/malicious_confidence_80% (W)
BitDefender	Generic.Ransom.MBRLock.9B8F77C8
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.bb5700
Cyren	W32/Agent.EW.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/MBRlock.BA
APEX	Malicious
ClamAV	Win.Malware.Zusy-6840460-0
MicroWorld-eScan	Generic.Ransom.MBRLock.9B8F77C8
Tencent	Trojan.Win32.Winlock.c
Ad-Aware	Generic.Ransom.MBRLock.9B8F77C8
Sophos	Mal/Generic-S
Comodo	Worm.Win32.Dropper.RA@1qraug
BitDefenderTheta	Gen:NN.ZexaF.34608.Sq0@aeVAGylb
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom.Win32.MBRLOCKER.SM
McAfee-GW-Edition	BehavesLike.Win32.Dropper.bh
FireEye	Generic.mg.75bd7b3bb5700af3
Emsisoft	Generic.Ransom.MBRLock.9B8F77C8 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Emotet!ml
Arcabit	Generic.Ransom.MBRLock.9B8F77C8
GData	Win32.Trojan.PSE.1FOH0JX
AhnLab-V3	Malware/Win32.Generic.R369477
Acronis	suspicious
McAfee	GenericRXAA-AA!75BD7B3BB570
MAX	malware (ai score=83)
Malwarebytes	Trojan.MalPack.FlyStudio
TrendMicro-HouseCall	Ransom.Win32.MBRLOCKER.SM
Rising	Malware.Heuristic!ET#97% (RDMK:cmRtazrCJf46RqnmU296BFmCMdok)
Ikarus	Trojan.Win32.MBRlock
MaxSecure	Dropper.Dinwod.frindll
Fortinet	W32/MBRlock.AQ!tr
Qihoo-360	Generic/HEUR/QVM07.1.076B.Malware.Gen

How to remove Generic.Ransom.MBRLock.9B8F77C8?

Generic.Ransom.MBRLock.9B8F77C8 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X