Ransom

Generic.Ransom.Stop.01022F30 removal instruction

Malware Removal

The Generic.Ransom.Stop.01022F30 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.Stop.01022F30 virus can do?

  • A process attempted to delay the analysis task.
  • Crashed cuckoomon during analysis. Report this error to the Github repo.
  • Installs itself for autorun at Windows startup
  • Writes a potential ransom message to disk
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Uses suspicious command line tools or Windows utilities

Related domains:

api.2ip.ua
bruze2.ug

How to determine Generic.Ransom.Stop.01022F30?


File Info:

crc32: CA06B22D
md5: 23b16aa9f2066c3cb177ed88a236ec04
name: 23B16AA9F2066C3CB177ED88A236EC04.mlw
sha1: a11b0c8951771ce8badfd8e9986338185473859e
sha256: 19e31ad8c18cc5aa013a8e0d7c208df741bc4739171cdb62cdc0bad6116a9e00
sha512: 0d22d6b6d70a8545e098af7da0d3ae589309721d97a453556cb5e9f0fb7dba7104c671920b7faea541947fdd8b6f425a885d3e3eaf9bded4d56fc29caeab1c9d
ssdeep: 6144:30TB+M5xLHIjSKlK1Yt6W+a03f1ZaPnqzHxzGvO2uuAGqxr:30TB+VSKlK+t6fayuPchT2vqx
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Ransom.Stop.01022F30 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 005455b71 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.26996
CynetMalicious (score: 100)
CAT-QuickHealRansom.STOP.S6701406
ALYacTrojan.Ransom.Stop
CylanceUnsafe
ZillyaTrojan.Filecoder.Win32.9345
SangforAdware.Win32.ConvertAd.Gen7
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaRansom:Win32/generic.ali2000027
K7GWTrojan ( 005455b71 )
Cybereasonmalicious.9f2066
CyrenW32/Ransom.IBHA-0488
SymantecDownloader
ESET-NOD32a variant of Win32/Filecoder.STOP.A
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
KasperskyHEUR:Trojan-Ransom.Win32.Stop.gen
BitDefenderDeepScan:Generic.Ransom.Stop.01022F30
NANO-AntivirusTrojan.Win32.Encoder.fpscko
MicroWorld-eScanDeepScan:Generic.Ransom.Stop.01022F30
TencentMalware.Win32.Gencirc.10b9b088
Ad-AwareDeepScan:Generic.Ransom.Stop.01022F30
SophosMal/Generic-S
ComodoMalware@#1t7zd0ke33p1a
BitDefenderThetaGen:NN.ZexaF.34790.xuX@aKvql0hi
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom.Win32.STOP.THGAEAI
McAfee-GW-EditionBehavesLike.Win32.Generic.fh
FireEyeGeneric.mg.23b16aa9f2066c3c
EmsisoftDeepScan:Generic.Ransom.Stop.01022F30 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Stop.dz
WebrootW32.Malware.Gen
AviraADWARE/ConvertAd.Gen7
eGambitUnsafe.AI_Score_96%
Antiy-AVLTrojan/Generic.ASMalwS.2BB2316
MicrosoftRansom:Win32/StopCrypt.MAK!MTB
GDataDeepScan:Generic.Ransom.Stop.01022F30
AhnLab-V3Trojan/Win32.RansomCrypt.R330916
McAfeeGeneric Trojan.ih
MAXmalware (ai score=100)
VBA32Trojan.Encoder
MalwarebytesRansom.Stop
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom.Win32.STOP.THGAEAI
RisingTrojan.Generic@ML.100 (RDML:p1NMWd6DrDlday48xLnU/w)
YandexTrojan.Agent!6UfKNgsvioA
IkarusTrojan-Ransom.Stop
MaxSecureTrojan.Malware.7164915.susgen
FortinetW32/Promorad.A!tr.ransom
AVGWin32:RansomX-gen [Ransom]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Stop.HwoCeY4A

How to remove Generic.Ransom.Stop.01022F30?

Generic.Ransom.Stop.01022F30 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment