How to remove "Generic.Ransom.SamSam.C593FFC7"?

The Generic.Ransom.SamSam.C593FFC7 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.SamSam.C593FFC7 virus can do?

Creates RWX memory
Exhibits behavior characteristic of iSpy Keylogger
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic.Ransom.SamSam.C593FFC7?


File Info:
crc32: 087AC7A5
md5: 286d1495a80c126a63c26a5610d515e6
name: 286D1495A80C126A63C26A5610D515E6.mlw
sha1: 3840eff73b8b611df62a10cacd75cae181b710b1
sha256: 0c1504ff73135e2a7920afac1c49c6ed1b11ac120b589fec08a87b05f457ebd2
sha512: fa98d8a2b0deef487392e5dc8eca89867c4aa88b7ec7e8624647884bd26912bebc93adb6d4434695fd51fd31061bed90b2660e6c759069c258d47838f78f387c
ssdeep: 768:50JPSh/E2mqzDjA6M9zAgyT0jxsDRpCTwCp5B:ISRxjAB9zPygjxCpCTwCpf
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: @2017
Assembly Version: 5.2.3.9
InternalName: WinDir.exe
FileVersion: 6.2.3.6
CompanyName: Microsoft
LegalTrademarks: Microsoft
Comments: Desktop Windows Manager
ProductName: Desktop Windows Manager
ProductVersion: 6.2.3.6
FileDescription: Desktop Windows Manager
OriginalFilename: WinDir.exe

Generic.Ransom.SamSam.C593FFC7 also known as:

K7AntiVirus	Trojan ( 004ff8a21 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.6671
Cynet	Malicious (score: 99)
ALYac	Trojan.Ransom.SamSam
Cylance	Unsafe
Zillya	Trojan.Filecoder.Win32.3678
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:MSIL/Samas.5a9e825a
K7GW	Trojan ( 004ff8a21 )
Cybereason	malicious.5a80c1
Cyren	W32/Azorult.D.gen!Eldorado
Symantec	Infostealer.Limitail
ESET-NOD32	a variant of MSIL/Filecoder.Samas.B
APEX	Malicious
Avast	Win32:Ransom-AYO [Trj]
Kaspersky	HEUR:Trojan-Ransom.MSIL.Generic
BitDefender	Generic.Ransom.SamSam.C593FFC7
NANO-Antivirus	Trojan.Win32.Encoder.ejewix
ViRobot	Trojan.Win32.S.SamSam.52224.A
MicroWorld-eScan	Generic.Ransom.SamSam.C593FFC7
Tencent	Malware.Win32.Gencirc.10bce9dc
Ad-Aware	Generic.Ransom.SamSam.C593FFC7
Sophos	Mal/Generic-R + Troj/Samas-C
Comodo	Malware@#391tvnosf34km
F-Secure	Heuristic.HEUR/AGEN.1109348
BitDefenderTheta	Gen:NN.ZemsilF.34722.dm0@aqBro3b
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_SAMAS.SMI0
McAfee-GW-Edition	Ransomware-FEF!286D1495A80C
FireEye	Generic.mg.286d1495a80c126a
Emsisoft	Generic.Ransom.SamSam.C593FFC7 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSIL.qcot
Avira	HEUR/AGEN.1109348
Antiy-AVL	Trojan/Generic.ASMalwS.1D06D1E
Microsoft	Ransom:MSIL/Samas.E
Arcabit	Generic.Ransom.SamSam.C593FFC7
AegisLab	Trojan.MSIL.Generic.j!c
ZoneAlarm	HEUR:Trojan-Ransom.MSIL.Generic
GData	Generic.Ransom.SamSam.C593FFC7
AhnLab-V3	Trojan/Win32.Samas.C1676066
McAfee	Ransomware-FEF!286D1495A80C
MAX	malware (ai score=100)
VBA32	Trojan-Ransom.MSIL.Samas
Malwarebytes	Malware.AI.2056418218
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_SAMAS.SMI0
Yandex	Trojan.Encoder!LS+U9HNYJZ4
Ikarus	Trojan.MSIL.Filecoder
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/FilecoderSamas.B!tr.ransom
AVG	Win32:Ransom-AYO [Trj]
Paloalto	generic.ml

How to remove Generic.Ransom.SamSam.C593FFC7?

Generic.Ransom.SamSam.C593FFC7 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Generic.Ransom.SamSam.C593FFC7”?