Should I remove “Ransom.GandCrab.1523”?

The Ransom.GandCrab.1523 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.GandCrab.1523 virus can do?

The binary likely contains encrypted or compressed data.

How to determine Ransom.GandCrab.1523?


File Info:
crc32: B2A2ED92
md5: 477abab3906f9f0ec5ef9f1e4d1d272a
name: 477ABAB3906F9F0EC5EF9F1E4D1D272A.mlw
sha1: 5a49b3689b9ff21448fca95506349ec68e9067f8
sha256: 7025bebf2bad3a4bf8b4c461f38d764dc16e21860e74857403d25570008a3b2b
sha512: ae7ad7e8523cb8b3381751cd8ba156ea651318747ab309974acfc0e93229baa550cedd35e09fb258cdc3f7568fc62d012dc8889f73d65fc6d862caaf3fb3caf0
ssdeep: 12288:dWDGrApuAslp8aHg0acy4MVxDNAmSHj8gWFJdSXtT/U2B1tb0lTOATqqMikWKvjt:dWJslp8aHg0acy4MVxDNAmSHu9S9TtbT
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Nero AG Copyright xa9.
InternalName: Software's Res
CompanyName: Nero AG
Comments: Halt Translation
ProductName: Software's Res
Languages: English
ProductVersion: 8.1.6.8
FileDescription: Halt Translation
Translation: 0x0409 0x04b0

Ransom.GandCrab.1523 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0053b4fd1 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ransom.GandCrab.1523
Cylance	Unsafe
Zillya	Trojan.GenericKD.Win32.169790
Sangfor	Trojan.Win32.GenericKD.3
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanPSW:Win32/Chisburg.4439d9e6
K7GW	Trojan ( 0053b4fd1 )
Cybereason	malicious.3906f9
Symantec	Trojan Horse
ESET-NOD32	a variant of Win32/GenKryptik.AHBN
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-PSW.Win32.Chisburg.ajyi
BitDefender	Gen:Variant.Ransom.GandCrab.1523
SUPERAntiSpyware	Trojan.Agent/Gen-Injector
MicroWorld-eScan	Gen:Variant.Ransom.GandCrab.1523
Tencent	Win32.Trojan.Inject.Auto
Ad-Aware	Gen:Variant.Ransom.GandCrab.1523
Sophos	Troj/Stealer-BZ
BitDefenderTheta	Gen:NN.ZexaE.34678.Qq0@ai@y2xoi
McAfee-GW-Edition	BehavesLike.Win32.Dropper.jc
FireEye	Generic.mg.477abab3906f9f0e
Emsisoft	Gen:Variant.Ransom.GandCrab.1523 (B)
Webroot	W32.Trojan.GenKD
Avira	TR/Kryptik.aqjcj
eGambit	Unsafe.AI_Score_100%
Microsoft	Trojan:Win32/Tiggre!rfn
AegisLab	Trojan.Win32.Chisburg.4!c
GData	Gen:Variant.Ransom.GandCrab.1523
AhnLab-V3	Trojan/Win32.Injecter.C2695729
McAfee	RDN/Generic PWS.nt
MAX	malware (ai score=100)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0ODK21
Rising	Trojan.GenKryptik!8.AA55 (CLOUD)
Yandex	Trojan.PWS.Chisburg!tfUGDm/X6nM
Ikarus	Trojan.Inject
Fortinet	W32/Chisburg.AJYI!tr.pws
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/TrojanSpy.Chisburg.HgIASOQA

How to remove Ransom.GandCrab.1523?

Ransom.GandCrab.1523 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X