Ransom.BlackOut removal

The Ransom.BlackOut is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.BlackOut virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

How to determine Ransom.BlackOut?


File Info:
crc32: 2BAD1597
md5: cd8e0406e752121c447e26a6234bf29b
name: us-2020-20-03-16-18-40-0c03454b-9417807a-3c87d917-c6c250ef-c4912959.com
sha1: fa54c82fe07b9d5600eb019fc6db3e7d21895027
sha256: c205d50556fe7ae5923452dbe6f5fc118229966bb1a7ce6ac87a9f2d371c987d
sha512: ea14d741bcb5a8f0bd7225a95349c18b87b0839ecd7daefbe63f14d458738cf5f8f6d086cef989feb859a302c54b1a80b349d636537bc1fbfdcb1761a68311d4
ssdeep: 6144:z4+oB3HwszcoHsuTM2k/vlx0Q/3W7TwlG5r6dLBOL4mZRSxAh9:zvoFHBjMugZlCy9fddmRj/
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2020
Assembly Version: 2.5.3.7
InternalName: visiodarven.exe
FileVersion: 2.5.3.7
CompanyName: Coazer
Comments: Fadibor
ProductName: Uzarol
ProductVersion: 2.5.3.7
FileDescription: Winupdalen
OriginalFilename: visiodarven.exe

Ransom.BlackOut also known as:

MicroWorld-eScan	Gen:Variant.Ursu.839217
FireEye	Generic.mg.cd8e0406e752121c
Qihoo-360	HEUR/QVM03.0.C37D.Malware.Gen
Malwarebytes	Ransom.BlackOut
BitDefender	Gen:Variant.Ursu.839217
Cybereason	malicious.fe07b9
Invincea	heuristic
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
GData	Gen:Variant.Ursu.839217
Kaspersky	UDS:DangerousObject.Multi.Generic
Endgame	malicious (high confidence)
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.PackedNET.87
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Ursu.839217 (B)
SentinelOne	DFI – Malicious PE
Avira	TR/Dropper.Gen
Arcabit	Trojan.Ursu.DCCE31
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	Trojan:Win32/Wacatac.D!ml
Acronis	suspicious
ALYac	Gen:Variant.Ursu.839217
Ad-Aware	Gen:Variant.Ursu.839217
ESET-NOD32	a variant of MSIL/Packed.MultiPacked.CW
MAX	malware (ai score=85)
eGambit	Unsafe.AI_Score_99%
BitDefenderTheta	Gen:NN.ZemsilF.34106.sq3@a8f6lkf
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Ransom.BlackOut?

Ransom.BlackOut removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X