Mal/Ransom-BU (file analysis)

The Mal/Ransom-BU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Ransom-BU virus can do?

Network activity detected but not expressed in API logs

How to determine Mal/Ransom-BU?


File Info:
crc32: 20C992BD
md5: 6830451b79cdbd601bb137ca1a64b29e
name: 6830451B79CDBD601BB137CA1A64B29E.mlw
sha1: f87c894f709dd593db97d31a24534fd6c27448a4
sha256: 99c5432eefb5bce7f5f6d5a497301bde80bdf3e43602ebc0f2a339ed997a0109
sha512: 462ebc40c60e2d176f91fbcffe35ed41be6c0fe67fa77d0d11640ac5ba1abe731ebd44c1b0889395561a0826985e7176eefb62700a4e1dcbdefe21a0780f8a3f
ssdeep: 3072:eJb/4MXwl+7I3xzesJekwYHT0H0tvocArU/GfyGEUI:ed4hF3xzesJTkPfy
type: MS-DOS executable, MZ for MS-DOS

Version Info:
LegalCopyright: Copyright (C) 1999
InternalName: CDCode
FileVersion: 3, 0, 0, 0
CompanyName: 
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: CDCode Application
SpecialBuild: 
ProductVersion: 3, 0, 0, 0
FileDescription: CDCode MFC Application
OriginalFilename: CDCode.EXE
Translation: 0x0409 0x04b0

Mal/Ransom-BU also known as:

Cylance	Unsafe
Cybereason	malicious.f709dd
Avast	Win32:WrongInf-A [Susp]
ViRobot	Trojan.Win32.Ransom.163840
Sophos	Mal/Ransom-BU
McAfee-GW-Edition	BehavesLike.Win32.Infected.dm
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Occamy.C99
AegisLab	Trojan.Win32.Generic.4!c
TACHYON	Trojan/W32.Agent.204800.BEV
McAfee	Artemis!6830451B79CD
MAX	malware (ai score=93)
Rising	Trojan.Occamy!8.F1CD (CLOUD)
Yandex	Trojan.GenAsa!khJOFhvkWGk
Fortinet	W32/Ransom.BU!tr
AVG	Win32:WrongInf-A [Susp]
Paloalto	generic.ml

How to remove Mal/Ransom-BU?

Mal/Ransom-BU removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X