Categories: Ransom

Generic.Ransom.MBRLock.E4FC68F6 removal instruction

The Generic.Ransom.MBRLock.E4FC68F6 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.MBRLock.E4FC68F6 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Attempted to write directly to a physical drive

How to determine Generic.Ransom.MBRLock.E4FC68F6?


File Info:
name: E03FEB4189C652327D60.mlwpath: /opt/CAPEv2/storage/binaries/49516402e63e8777e07b305450fd69927ee7f767c19ba2d966abef5ad4c3afa6crc32: A51ECDDFmd5: e03feb4189c652327d60064b888fc705sha1: e161ef85cf6cfcc1b7156e17282864fc7e87fb02sha256: 49516402e63e8777e07b305450fd69927ee7f767c19ba2d966abef5ad4c3afa6sha512: 4725022456840fca0754b4da4f68cfb91cdd8e9fa25076f3bf87a27f2002fe1c1bdcad1ade6109aefa798c045b5c6cc1a7f3bc85c92be1bdbfc91a3dfd47828cssdeep: 24576:uXKUvFniqqcHxSzWJ1TZaqdiXSp0c02uFG6dAk3HMgc4qv:uXRv7qcASJ1TZaqdwk0c05HGiNcJtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A285D0F2F59281FEC6201930096AE7F6DAF96E066B14CA8357D4FD5F3872D80A533129sha3_384: 79b6b5346c9b79c246fbe35b5364db4cb7d60974155e0bf3f67c76cd7c43ec8ac50d1eb92950382fd22e22abdec8754fep_bytes: 558bec6aff6888a857006844da460064timestamp: 2022-08-30 08:47:34
Version Info:
0: [No Data]

Generic.Ransom.MBRLock.E4FC68F6 also known as:

Bkav	W32.AIDetect.malware1
tehtris	Generic.Malware
MicroWorld-eScan	DeepScan:Generic.Ransom.MBRLock.E4FC68F6
ClamAV	Win.Trojan.Flystudio-9943951-0
FireEye	Generic.mg.e03feb4189c65232
ALYac	DeepScan:Generic.Ransom.MBRLock.E4FC68F6
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 005246d51 )
K7GW	Adware ( 004b87ea1 )
Cybereason	malicious.189c65
Cyren	W32/OnlineGames.HG.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/MBRlock.AQ
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Ransom.Win32.Mbro.gen
BitDefender	DeepScan:Generic.Ransom.MBRLock.E4FC68F6
Avast	Win32:RansomX-gen [Ransom]
Tencent	Trojan.Win32.Foreign.16000100
Ad-Aware	DeepScan:Generic.Ransom.MBRLock.E4FC68F6
Emsisoft	DeepScan:Generic.Ransom.MBRLock.E4FC68F6 (B)
Comodo	Worm.Win32.Dropper.RA@1qraug
DrWeb	Trojan.MulDrop20.48912
VIPRE	DeepScan:Generic.Ransom.MBRLock.E4FC68F6
TrendMicro	Ransom_Mbro.R011C0GI122
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.PSE.11UD6H7
Avira	TR/Ransom.MBRlock.vfmhd
Antiy-AVL	Trojan/Generic.ASCommon.FA
Arcabit	DeepScan:Generic.Ransom.MBRLock.E4FC68F6
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Malware/Win32.Generic.C4335005
McAfee	Artemis!E03FEB4189C6
MAX	malware (ai score=83)
Malwarebytes	Trojan.MalPack.FlyStudio
TrendMicro-HouseCall	Ransom_Mbro.R011C0GI122
Rising	Ransom.MBRLock!1.D7C5 (CLASSIC)
Yandex	Trojan.GenAsa!aJ6jK3uE76k
Ikarus	Trojan.Win32.MBRlock
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/MBRlock.AQ!tr.ransom
BitDefenderTheta	Gen:NN.ZexaF.34606.RrW@aSit95pb
AVG	Win32:RansomX-gen [Ransom]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_60% (W)