Ransom.GandCrab.913 (B) removal

The Ransom.GandCrab.913 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.GandCrab.913 (B) virus can do?

Authenticode signature is invalid

How to determine Ransom.GandCrab.913 (B)?


File Info:
name: 5B6BC1F0B63F8D01F9E3.mlw
path: /opt/CAPEv2/storage/binaries/fb1daf13c4239cdeba2e6300d50cdc576c86331216ce2a16d18db0ccac3acaf2
crc32: 4D54BFE3
md5: 5b6bc1f0b63f8d01f9e3d7ab9b7612f0
sha1: a62c388d6d89cafaf275271f561ffe523e1a3465
sha256: fb1daf13c4239cdeba2e6300d50cdc576c86331216ce2a16d18db0ccac3acaf2
sha512: 4dfe15a9058d948c6fb10a7467ac91dff6874546b90016cae9841eaa4647ee2a20bfd2eeb0b7ac63cf4363ce9212481085c08acded6b5ee78f1558dc06ad60e1
ssdeep: 768:Nc0XZN0SPM2fySjZFo7plWoNK6cw3c0vUBY:aCx9fJglWmcmUi
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T192F36B0275B58477E4A643390CB45B21DABCBC477A38A6C773D8938F2EF20D19A543A3
sha3_384: 8557d721eebe927a88804a75172af97033573fac8b3778552534fa9ab2a4f7bdf01b647559c1bf985061509d8401abb8
ep_bytes: e86a120000e97bfeffff3b0d50301c00
timestamp: 2018-05-07 21:38:10

Version Info:
0: [No Data]

Ransom.GandCrab.913 (B) also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ransom.GandCrab.913
FireEye	Generic.mg.5b6bc1f0b63f8d01
CAT-QuickHeal	Trojan.Mauvaise.SL1
ALYac	Gen:Variant.Ransom.GandCrab.913
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Arcabit	Trojan.Ransom.GandCrab.913
Cyren	W32/Kryptik.HKH.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.GXKS
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan.Win64.CallMeRoot.gen
BitDefender	Gen:Variant.Ransom.GandCrab.913
Avast	Win32:RansomX-gen [Ransom]
Ad-Aware	Gen:Variant.Ransom.GandCrab.913
Emsisoft	Gen:Variant.Ransom.GandCrab.913 (B)
Comodo	TrojWare.Win32.Chapak.GO@7o85ni
VIPRE	Gen:Variant.Ransom.GandCrab.913
McAfee-GW-Edition	GenericRXGI-RO!5B6BC1F0B63F
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
Avira	TR/Crypt.EPACK.Gen2
Microsoft	Trojan:Win32/Meterpreter!ml
GData	Gen:Variant.Ransom.GandCrab.913
Google	Detected
AhnLab-V3	Trojan/Win32.Gandcrab.C2499364
McAfee	GenericRXGI-RO!5B6BC1F0B63F
MAX	malware (ai score=89)
Malwarebytes	Malware.AI.1878503659
Rising	Ransom.GandCrab!8.F355 (TFE:5:uaUAWKpdsLC)
Yandex	Trojan.GenAsa!sEQ6NA0nfs4
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.GXKS!tr
BitDefenderTheta	AI:Packer.922F036A1E
AVG	Win32:RansomX-gen [Ransom]
Cybereason	malicious.0b63f8
Panda	Trj/Genetic.gen

How to remove Ransom.GandCrab.913 (B)?

Ransom.GandCrab.913 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X