Generic.Ransom.Spora.EEC612FD information

The Generic.Ransom.Spora.EEC612FD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.Spora.EEC612FD virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Guard pages use detected – possible anti-debugging.
• Dynamic (imported) function loading detected
• Uses Windows utilities to enumerate running processes
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Uses suspicious command line tools or Windows utilities

How to determine Generic.Ransom.Spora.EEC612FD?

File Info:
name: 404E663BDE65F1860679.mlw
path: /opt/CAPEv2/storage/binaries/6e02af0f8cdfe76a67a9e0699ef9c683f6f47a8afefba5659da3906bfe879ba7
crc32: 7777FC6A
md5: 404e663bde65f1860679a1abea3fc866
sha1: 1ec4677f29d190225d2f46d6d74aeb11032f472c
sha256: 6e02af0f8cdfe76a67a9e0699ef9c683f6f47a8afefba5659da3906bfe879ba7
sha512: f76612b2595017a613820228e3436d3bd7852045edba350557ede8f2d533eca62e9c5928cf53711d9ba8ab3b185d877291fd17631fb2c4e77fea4c19e2faecc5
ssdeep: 49152:nblXNZD9GPXnd3xxP3CPGtPcFblXNZD9GPXnd3xxP3CPGtPcFblXNZD9GPXnd3x8:bl9Nwd6hl9Nwd6hl9Nwd6hl9Nwd6
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T19B269D30BA82D136E56101F04FB8EB9A55ADF9290F3647CF73D44A2D69319D20E36E63
sha3_384: 966e7ee26abb522cb6a3cd6eaaccb75c2a215d6af2284ea755b640d22a8417856fc756cc9dc969bf4795046e371409db
ep_bytes: e8c20c0000e974feffffcccccccccc80
timestamp: 2021-10-08 12:51:12

Version Info:
CompanyName: Microsoft
FileDescription: Microsoft Protection Service
ProductName: Microsoft
Translation: 0x0409 0x04b0

Generic.Ransom.Spora.EEC612FD also known as:

How to remove Generic.Ransom.Spora.EEC612FD?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.