Categories: Ransom

Generic.Ransom.Small.DA27389C removal instruction

The Generic.Ransom.Small.DA27389C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.Small.DA27389C virus can do?

  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Generic.Ransom.Small.DA27389C?


File Info:

name: 82103C1E8DDA986A554E.mlwpath: /opt/CAPEv2/storage/binaries/f7df059ca4d8252966ff07946bc810524d318d063531c28c51c3e23c8841c8bacrc32: 2B9986A5md5: 82103c1e8dda986a554e3b9405db0b6bsha1: 4802212046a05594bae821bb4fd0341bc8ea3c8asha256: f7df059ca4d8252966ff07946bc810524d318d063531c28c51c3e23c8841c8basha512: 07d057b05d9fc05c0494d50e2470ae05da8abd6c645fe8fa00d01bddf82abdf83e5c6c147544519c805c07eab0f91147d0b31d6d06d3c8453fe1c106d1ce3a2assdeep: 192:WQ5pjGeQ5VArAKHgiY9DqBeFv8+53FebdtSfr:WaaDLMAiY9nyCCStype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T1CA324D453BED9779F1BB6E3A1AE1A60513B97D3ADC2ED3CD148C4108186174C9EE0B2Esha3_384: 95e3eb8c83a0efc196d68b14f45fd5491d4de05febb574aee73949ea99a4efa390484d96ca035856af5bebb9cd39be44ep_bytes: ff250020400000000000000000000000timestamp: 2021-08-06 16:34:03

Version Info:

Translation: 0x0000 0x04b0FileDescription: FileVersion: 0.0.0.0InternalName: RunSomeAware.exeLegalCopyright: OriginalFilename: RunSomeAware.exeProductVersion: 0.0.0.0Assembly Version: 0.0.0.0

Generic.Ransom.Small.DA27389C also known as:

Lionic Trojan.MSIL.Encoder.j!c
Elastic malicious (high confidence)
MicroWorld-eScan Generic.Ransom.Small.DA27389C
FireEye Generic.mg.82103c1e8dda986a
CAT-QuickHeal Trojan.MsilFC.S23218976
McAfee Ransom-RunSome!82103C1E8DDA
Cylance Unsafe
Sangfor Ransom.MSIL.Filecoder.ZI
K7AntiVirus Trojan ( 00572a8e1 )
Alibaba Ransom:MSIL/Encoder.ccc40177
K7GW Trojan ( 00572a8e1 )
Cybereason malicious.e8dda9
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Filecoder.ZI
APEX Malicious
Paloalto generic.ml
Kaspersky HEUR:Trojan-Ransom.MSIL.Encoder.gen
BitDefender Generic.Ransom.Small.DA27389C
Avast Win32:MalwareX-gen [Trj]
Tencent Msil.Trojan.Encoder.Dwsm
Ad-Aware Generic.Ransom.Small.DA27389C
Sophos Mal/Generic-S
TrendMicro Ransom_Encoder.R002C0PKO21
McAfee-GW-Edition Ransom-RunSome!82103C1E8DDA
Emsisoft Generic.Ransom.Small.DA27389C (B)
Ikarus Trojan-Ransom.FileCrypter
GData Generic.Ransom.Small.DA27389C
Jiangmin Trojan.MSIL.alklg
Avira TR/Ransom.npwfc
Antiy-AVL Trojan/Generic.ASMalwS.34EB1FA
Microsoft Trojan:Win32/Wacatac.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Malware/Win.Generic.C4599591
BitDefenderTheta Gen:NN.ZemsilF.34084.am0@aa7vr0o
ALYac Generic.Ransom.Small.DA27389C
MAX malware (ai score=89)
VBA32 TScope.Trojan.MSIL
Malwarebytes Ransom.FileCryptor
TrendMicro-HouseCall Ransom_Encoder.R002C0PKO21
SentinelOne Static AI – Malicious PE
eGambit Unsafe.AI_Score_64%
Fortinet MSIL/Filecoder.2D3F!tr.ransom
AVG Win32:MalwareX-gen [Trj]
Panda Trj/GdSda.A
CrowdStrike win/malicious_confidence_100% (W)
MaxSecure Trojan.Malware.300983.susgen

How to remove Generic.Ransom.Small.DA27389C?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

About “Trojan-Downloader.Win32.Upatre.fxzr” infection

The Trojan-Downloader.Win32.Upatre.fxzr is considered dangerous by lots of security experts. When this infection is active,…

58 mins ago

What is “Script:SNH-gen [Drp]”?

The Script:SNH-gen [Drp] is considered dangerous by lots of security experts. When this infection is…

1 hour ago

Backdoor.MSIL.Bladabindi.cguk removal guide

The Backdoor.MSIL.Bladabindi.cguk is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Should I remove “W32/Autorun-BXQ”?

The W32/Autorun-BXQ is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

What is “Worm.Win32.AutoRun.gms”?

The Worm.Win32.AutoRun.gms is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

What is “Trojan:Win32/Zenpak.ASAF!MTB”?

The Trojan:Win32/Zenpak.ASAF!MTB is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago