Ransom

Generic.Ransom.MBRLock.F777629B information

Malware Removal

The Generic.Ransom.MBRLock.F777629B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Generic.Ransom.MBRLock.F777629B virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Reads data out of its own binary image
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Tries to unhook or modify Windows functions monitored by Cuckoo

How to determine Generic.Ransom.MBRLock.F777629B?



File Info:

crc32: 93982B80
md5: c0e7862e38cf318c500ff778acdaf536
name: C0E7862E38CF318C500FF778ACDAF536.mlw
sha1: 695fb528ae1fc47f9bfbce8f44888b1ede287773
sha256: 4c82194e2d743f77dde29a3319ebce5e38bc221c8501eefe1e380585ed7f4aa4
sha512: d7030c5c2a9cd974095ba3d87d3fff4d65122912b5028bffbd649b8cafe8cdc3b6ff5d703b7ea25102b3a551a1062eeb0c881bfbeb0ad52417a1d4015fd00746
ssdeep: 24576:7fdJXpYSKEDRWTg+YeP/YkOqLKtbd6M4Yor:7CSKRM+Y2ZPLmYf
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: x4f5cx8005x7248x6743x6240x6709 x8bf7x5c0ax91cdx5e76x4f7fx7528x6b63x7248
FileVersion: 1.2.8.0
Comments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.eyuyan.com)
ProductName: x6613x8bedx8a00x7a0bx5e8f
ProductVersion: 1.2.8.0
FileDescription: x6613x8bedx8a00x7a0bx5e8f
Translation: 0x0804 0x04b0

Generic.Ransom.MBRLock.F777629B also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005246d51 )
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Wsgame.53013
CynetMalicious (score: 100)
CAT-QuickHealRisktool.Flystudio.16885
ALYacDeepScan:Generic.Ransom.MBRLock.F777629B
CylanceUnsafe
ZillyaTool.Gamehack.Win32.1
SangforVirus_Suspicious.Win32.Sality.ae
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 005246d51 )
Cybereasonmalicious.e38cf3
CyrenW32/Agent.EW.gen!Eldorado
ESET-NOD32a variant of Win32/FlyStudio.Injector.A potentially unwanted
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
ClamAVWin.Malware.Generic-9820446-0
KasperskyHEUR:HackTool.Win32.GameHack.gen
BitDefenderDeepScan:Generic.Ransom.MBRLock.F777629B
NANO-AntivirusTrojan.Win32.Wsgame.ftsvst
MicroWorld-eScanDeepScan:Generic.Ransom.MBRLock.F777629B
TencentWin32.Hacktool.Gamehack.Syrn
Ad-AwareDeepScan:Generic.Ransom.MBRLock.F777629B
SophosGeneric PUA GJ (PUA)
ComodoTrojWare.Win32.Agent.OSCF@5rs7jr
BitDefenderThetaGen:NN.ZexaF.34608.kr2aaO5B4Anb
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom.Win32.MBRLOCKER.SM
McAfee-GW-EditionBehavesLike.Win32.Dropper.th
FireEyeGeneric.mg.c0e7862e38cf318c
EmsisoftDeepScan:Generic.Ransom.MBRLock.F777629B (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Ransom.Molock.xbpoq
eGambitUnsafe.AI_Score_100%
MicrosoftRansom:Win32/Molock.A!bit
ArcabitDeepScan:Generic.Ransom.MBRLock.FDBDD9DB
GDataWin32.Application.PUPStudio.A
AhnLab-V3Backdoor/Win32.Blackhole.C83197
Acronissuspicious
McAfeeGenericRXAA-AA!C0E7862E38CF
MAXmalware (ai score=88)
MalwarebytesTrojan.Agent
PandaTrj/Genetic.gen
TrendMicro-HouseCallRansom.Win32.MBRLOCKER.SM
RisingRansom.MBRlock!1.B6DC (C64:YzY0OmSdiAgE5DK+)
YandexTrojan.GenAsa!2zX5HL7qyqU
IkarusTrojan.Win32.MBRlock
FortinetW32/Agent.65CA!tr
AVGWin32:RansomX-gen [Ransom]
Qihoo-360HEUR/QVM07.1.D77B.Malware.Gen

How to remove Generic.Ransom.MBRLock.F777629B?

Generic.Ransom.MBRLock.F777629B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment