Categories: Ransom

Generic.Ransom.Small.B369EB72 (file analysis)

The Generic.Ransom.Small.B369EB72 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.Small.B369EB72 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Steals private information from local Internet browsers
  • Mimics the file times of a Windows system file
  • Installs itself for autorun at Windows startup
  • Exhibits possible ransomware file modification behavior
  • Writes a potential ransom message to disk
  • Creates a copy of itself
  • Appends a known CryLocker ransomware file extension to files that have been encrypted
  • Anomalous binary characteristics

How to determine Generic.Ransom.Small.B369EB72?


File Info:

crc32: 1FB0BF76md5: ffa21db10c7f2db9cb5324f3a1f17ca4name: FFA21DB10C7F2DB9CB5324F3A1F17CA4.mlwsha1: a05e65dfb1015a3b51b6307e83b4c1afc03c74bdsha256: 8bb97a411bd67b33b85548d3c99b25fb6ab01e37cbf3c57a74b172baa097b8edsha512: 902624dbdbb4724da6c639a2dec28ec2c3fac72283c0d6716a40cb6962b0eab1f647ede62e705d112bf63f2ae92fac3dfba6108a7d55a2f620de01dd09f6b772ssdeep: 192:dig9cDo+uaSa2pFz36zaAcXFyO4qhD+gCsYTEufzlsHctUweh+5rSVBq27hBSA5:ooOSZ1Kz2TjggCsYQus+Be0wr2A5type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Ransom.Small.B369EB72 also known as:

Bkav W32.AIDetect.malware1
K7AntiVirus Trojan ( 005451b81 )
Elastic malicious (high confidence)
Cynet Malicious (score: 100)
ALYac DeepScan:Generic.Ransom.Small.B369EB72
Cylance Unsafe
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
Alibaba Ransom:Win32/generic.ali2000010
K7GW Trojan ( 005451b81 )
Cybereason malicious.10c7f2
Cyren W32/Heuristic-119!Eldorado
ESET-NOD32 a variant of Win32/Filecoder.Q
APEX Malicious
TotalDefense Win32/Ransom.A!generic
Avast Win32:Malware-gen
Kaspersky HEUR:Trojan.Win32.Generic
BitDefender DeepScan:Generic.Ransom.Small.B369EB72
NANO-Antivirus Trojan.Win32.Fraud.ewcnqt
MicroWorld-eScan DeepScan:Generic.Ransom.Small.B369EB72
Tencent Win32.Trojan.Raas.Auto
Ad-Aware DeepScan:Generic.Ransom.Small.B369EB72
Sophos Mal/Generic-S
Comodo TrojWare.Win32.Kryptik.ER@4o1ar2
BitDefenderTheta Gen:NN.ZexaF.34608.aqW@aayBONai
VIPRE Trojan.Win32.Generic!BT
TrendMicro TROJ_RANSOM.SMAR
McAfee-GW-Edition Generic.cwu
FireEye Generic.mg.ffa21db10c7f2db9
Emsisoft DeepScan:Generic.Ransom.Small.B369EB72 (B)
SentinelOne Static AI – Malicious PE
Avira TR/Fraud.Gen
Microsoft Ransom:MacOS/Filecoder
Arcabit DeepScan:Generic.Ransom.Small.B369EB72
GData DeepScan:Generic.Ransom.Small.B369EB72
Acronis suspicious
McAfee Generic.cwu
MAX malware (ai score=99)
VBA32 BScope.Trojan.Encoder
Panda Trj/Genetic.gen
TrendMicro-HouseCall TROJ_RANSOM.SMAR
Rising Ransom.Sorikrypt!8.8822 (CLOUD)
Yandex Trojan.GenAsa!FJ4YibNxi0E
Ikarus Trojan-Ransom.FileCrypter
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/Xorist.DD8C!tr.ransom
AVG Win32:Malware-gen
Paloalto generic.ml
Qihoo-360 HEUR/QVM20.1.E327.Malware.Gen

How to remove Generic.Ransom.Small.B369EB72?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

How to remove “Troj/VB-IGX”?

The Troj/VB-IGX is considered dangerous by lots of security experts. When this infection is active,…

22 mins ago

UDS:Trojan.Win32.DBadur removal tips

The UDS:Trojan.Win32.DBadur is considered dangerous by lots of security experts. When this infection is active,…

27 mins ago

What is “Jalapeno.348”?

The Jalapeno.348 is considered dangerous by lots of security experts. When this infection is active,…

42 mins ago

Razy.665944 removal

The Razy.665944 is considered dangerous by lots of security experts. When this infection is active,…

52 mins ago

Symmi.3599 removal instruction

The Symmi.3599 is considered dangerous by lots of security experts. When this infection is active,…

52 mins ago

Malware.AI.73035705 information

The Malware.AI.73035705 is considered dangerous by lots of security experts. When this infection is active,…

53 mins ago