Ransom.BitRansomware removal tips

The Ransom.BitRansomware is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.BitRansomware virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Ransom.BitRansomware?


File Info:
name: BF02FD4C142D699506EB.mlw
path: /opt/CAPEv2/storage/binaries/e1215cb146734fba6de6b754666bb8e9b5b9c94954f110e1d7ccfb0403c9c803
crc32: B30B87D3
md5: bf02fd4c142d699506ebf779023e1992
sha1: 231cce575fa026b337b103deec38bb0cf8be874b
sha256: e1215cb146734fba6de6b754666bb8e9b5b9c94954f110e1d7ccfb0403c9c803
sha512: df22da2a87e165269779f083ad12c9a5100fbb665e94d88cd37b713d8cad85e35ae98ce637768258d78ffd098d23e3ef205cf603c17f3cdd3eefc3819a42fb72
ssdeep: 1536:8avojrBUg04yROxzERqI8ZhWo78whRVEQ8lMbXwmHgRa95RbzuJuV1:8aAvbyEATooiqrgAmH9zuJu7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F793F102A6909734C8B98F72106137208FA67775585B9BAFF49C944F7F2672183A37E1
sha3_384: 2ee21363ead35c6be1f9976df59eb24786ad1451ab0a7c798a326ed0440178e2612df12f3de80c4960a26ae796116f89
ep_bytes: ff250020400000000000000000000000
timestamp: 2072-12-13 02:29:57

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Override_Gui
FileVersion: 1.0.0.0
InternalName: Override_Gui.exe
LegalCopyright: Copyright ©  2022
LegalTrademarks: 
OriginalFilename: Override_Gui.exe
ProductName: Override_Gui
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Ransom.BitRansomware also known as:

Bkav	W32.AIDetectNet.01
Lionic	Trojan.Win32.Rents.4!c
Elastic	malicious (moderate confidence)
FireEye	Gen:Heur.Ransom.REntS.Gen.1
McAfee	RDN/Generic.dx
Malwarebytes	Ransom.BitRansomware
BitDefender	Gen:Heur.Ransom.REntS.Gen.1
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.HEHYBHO
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Alibaba	Trojan:Win32/REntS.03a2b5e9
MicroWorld-eScan	Gen:Heur.Ransom.REntS.Gen.1
Avast	Win32:Malware-gen
Ad-Aware	Gen:Heur.Ransom.REntS.Gen.1
Emsisoft	Gen:Heur.Ransom.REntS.Gen.1 (B)
VIPRE	Gen:Heur.Ransom.REntS.Gen.1
TrendMicro	TROJ_GEN.R049C0PFD22
McAfee-GW-Edition	RDN/Generic.dx
Ikarus	Trojan.SuspectCRC
GData	Gen:Heur.Ransom.REntS.Gen.1
Webroot	W32.Malware.Gen
MAX	malware (ai score=83)
Arcabit	Trojan.Ransom.REntS.Gen.1
Microsoft	Program:Win32/Wacapew.C!ml
AhnLab-V3	Malware/Win.Generic.C5181550
ALYac	Trojan.Ransom.Filecoder
Cylance	Unsafe
TrendMicro-HouseCall	TROJ_GEN.R049C0PFD22
Rising	Trojan.Undefined!8.1327C (CLOUD)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat!tr.ransom
BitDefenderTheta	Gen:NN.ZemsilF.34786.fm0@a4gEhhb
AVG	Win32:Malware-gen
Cybereason	malicious.c142d6

How to remove Ransom.BitRansomware?

Ransom.BitRansomware removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X