Generic.Ransom.Small.9E996FFD removal

The Generic.Ransom.Small.9E996FFD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Ransom.Small.9E996FFD virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the Chaos malware family

How to determine Generic.Ransom.Small.9E996FFD?


File Info:
name: 29696F971E88F158E5C1.mlw
path: /opt/CAPEv2/storage/binaries/022990adc6888b764b7ab272bedd3171ef12de36f5fafb593fe3c57810c3aeed
crc32: D129C798
md5: 29696f971e88f158e5c1a1e41460b532
sha1: c7125d86116c63f011c6c577705d9bdc34671679
sha256: 022990adc6888b764b7ab272bedd3171ef12de36f5fafb593fe3c57810c3aeed
sha512: 344c03b112c2f8c90c39a5505260bd8719690e2484564586b3274c0105980cb3f7178f08980d4313f42e5bdb154e1294d460865babee86715d3fbb9773b2e087
ssdeep: 384:47Diz/0QhSYJpNx1WUggcovxqws5r91CHZF:0iz/0sS2pNx8QJS5r9KD
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1AA822B1427FE8B31EAFE0DBE5CB241015774F923A816EACE1DD0025E4A3274D8D95B6B
sha3_384: d3cf4ee9a0e370b0cd2de5f2eb63045123f297632b46f4e81852d81ca1173d8a90452f4c3a9a956845482ededc88165a
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-12-10 11:24:11

Version Info:
Translation: 0x0000 0x04b0
FileDescription: RozbehRans
FileVersion: 1.0.8014.6125
InternalName: RozbehRans.exe
LegalCopyright: Copyright 2021
OriginalFilename: RozbehRans.exe
ProductName: RozbehRans
ProductVersion: 1.0.8014.6125
Assembly Version: 1.0.8014.6125

Generic.Ransom.Small.9E996FFD also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.Ransom.Small.9E996FFD
Symantec	Ransom.HiddenTear!g1
ESET-NOD32	a variant of MSIL/Filecoder.AJE
APEX	Malicious
ClamAV	Win.Ransomware.Hydracrypt-9878672-0
Kaspersky	HEUR:Trojan-Ransom.MSIL.Agent.gen
BitDefender	Generic.Ransom.Small.9E996FFD
Ad-Aware	Generic.Ransom.Small.9E996FFD
DrWeb	Trojan.Encoder.10598
TrendMicro	Ransom.MSIL.CHAOS.SMLKC
FireEye	Generic.mg.29696f971e88f158
Emsisoft	Generic.Ransom.Small.9E996FFD (B)
Ikarus	Trojan-Ransom.Penta
GData	Generic.Ransom.Small.9E996FFD
Avira	TR/ATRAPS.Gen
Arcabit	Generic.Ransom.Small.9E996FFD
Microsoft	Ransom:MSIL/FileCoder.AD!MTB
ALYac	Generic.Ransom.Small.9E996FFD
MAX	malware (ai score=88)
TrendMicro-HouseCall	Ransom_RAMSIL.SM
Rising	Ransom.Destructor!1.B060 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	MSIL/Filecoder.970D!tr.ransom
BitDefenderTheta	Gen:NN.ZemsilF.34062.bm0@aqRBfjf
Cybereason	malicious.71e88f

How to remove Generic.Ransom.Small.9E996FFD?

Generic.Ransom.Small.9E996FFD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X