Generic.Ransom.WCryG.497C2D7F (file analysis)

The Generic.Ransom.WCryG.497C2D7F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.WCryG.497C2D7F virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic.Ransom.WCryG.497C2D7F?


File Info:
crc32: 104B6552
md5: cf29a7ba27a05f59178799255d717a42
name: CF29A7BA27A05F59178799255D717A42.mlw
sha1: 82112a56212bed04d0460dbcd3782603c4527be5
sha256: 3ac54901576f1c1d7593bbb1208e8267b422602128710a3dcef1096ad1f881e7
sha512: cf69e986a3587f9eeb5e9fcc841b793c2a266c315fa5dc02c28f06e543771ed9dd0a7f992160e36809d13dfd6b6f9270b3e3c77e5c1e89dcfb02527ce5101a47
ssdeep: 3072:qteAR+ViCPbwql6cod3foOKxOnEoOx/lv:EnUPbadvAxOEz9v
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Microsoft Corp . All rights reserved.
Assembly Version: 1.0.0.0
InternalName: Wanacrytor.exe
FileVersion: 1.0.0.0
CompanyName: Microsoft
LegalTrademarks: 
Comments: NT Kernel & System
ProductName: Shareware
ProductVersion: 1.0.0.0
FileDescription: Shareware
OriginalFilename: Wanacrytor.exe

Generic.Ransom.WCryG.497C2D7F also known as:

ALYac	Generic.Ransom.WCryG.497C2D7F
Sangfor	Trojan.Win32.Save.a
BitDefender	Generic.Ransom.WCryG.497C2D7F
Cybereason	malicious.a27a05
ESET-NOD32	a variant of MSIL/Filecoder.ZH
APEX	Malicious
Cynet	Malicious (score: 99)
MicroWorld-eScan	Generic.Ransom.WCryG.497C2D7F
Ad-Aware	Generic.Ransom.WCryG.497C2D7F
Sophos	Mal/Genasom-A
F-Secure	Trojan.TR/Dropper.Gen
BitDefenderTheta	Gen:NN.ZemsilF.34050.qm0@aeLALtb
TrendMicro	Ransom_RAMSIL.SM
FireEye	Generic.Ransom.WCryG.497C2D7F
Emsisoft	Generic.Ransom.WCryG.497C2D7F (B)
Avira	TR/Dropper.Gen
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Generic.Ransom.WCryG.497C2D7F
GData	Generic.Ransom.WCryG.497C2D7F
MAX	malware (ai score=81)
TrendMicro-HouseCall	Ransom_RAMSIL.SM
MaxSecure	Trojan.Malware.300983.susgen

How to remove Generic.Ransom.WCryG.497C2D7F?

Generic.Ransom.WCryG.497C2D7F removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generic.Ransom.WCryG.497C2D7F (file analysis)