Ransom

Ransom.GandCrab.Generic malicious file

Malware Removal

The Ransom.GandCrab.Generic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom.GandCrab.Generic virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Ransom.GandCrab.Generic?


File Info:

crc32: 0C4B048D
md5: 0b2ee26b2202edbe90136a775f393f57
name: 0B2EE26B2202EDBE90136A775F393F57.mlw
sha1: a84fc651542c06e739e7d70565674a4ec2f9ae5e
sha256: 4e2cc7df15694686df403fd51dbae40bdc1036ec4c8eec4797a9b618b1d15772
sha512: 349289cf9751101d94c6fb6da107b40452e2c18b8ee24821bc42a13fdab5743354213e04f864752370f8c5e24e43c7a474e28f31fcc1d4dce1e4e9fbf8cfe7b3
ssdeep: 6144:rcykOtl38P6GUysJvmUkVipuaFoIb33Mff:rcQtF8yGovJgitpb33Mff
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Ransom.GandCrab.Generic also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Emotet.Gen.3
FireEyeGeneric.mg.0b2ee26b2202edbe
CAT-QuickHealTrojan.Chapak.ZZ6
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.GandCrypt.j!c
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 003e58dd1 )
BitDefenderTrojan.Emotet.Gen.3
K7GWTrojan ( 003e58dd1 )
Cybereasonmalicious.b2202e
CyrenW32/Trojan.DOUL-9001
SymantecPacked.Generic.525
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Trojan.Emotet-6461430-0
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.Encoder.eyktiq
TencentMalware.Win32.Gencirc.10b217c8
Ad-AwareTrojan.Emotet.Gen.3
EmsisoftTrojan.Emotet.Gen.3 (B)
ComodoTrojWare.Win32.Ransom.GandCrab.A@7jk3ar
F-SecureHeuristic.HEUR/AGEN.1117310
DrWebTrojan.Encoder.24384
ZillyaTrojan.Foreign.Win32.57649
TrendMicroTSPY_EMOTET.SMB1
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
SophosMal/Generic-S + Mal/GandCrab-B
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Yakes.yzc
AviraHEUR/AGEN.1117310
eGambitUnsafe.AI_Score_83%
MAXmalware (ai score=99)
Antiy-AVLTrojan[Ransom]/Win32.GandCrypt
MicrosoftVirTool:Win32/CeeInject.ALV!bit
ArcabitTrojan.Emotet.Gen.3
SUPERAntiSpywareTrojan.Agent/Gen-Bunitu
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataTrojan.Emotet.Gen.3
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Magniber.R221240
Acronissuspicious
McAfeeTrojan-FPOH!0B2EE26B2202
VBA32Trojan.Encoder
MalwarebytesRansom.GandCrab.Generic
PandaTrj/Genetic.gen
ESET-NOD32Win32/Filecoder.GandCrab.B
TrendMicro-HouseCallTSPY_EMOTET.SMB1
RisingMalware.Obscure!1.A3BB (CLOUD)
YandexTrojan.GenAsa!VgLkF384uzA
IkarusTrojan-Ransom.GandCrab
FortinetW32/Kryptik.HCUD!tr
BitDefenderThetaGen:NN.ZexaF.34590.ruW@aerhe!jO
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360HEUR/QVM10.1.8903.Malware.Gen

How to remove Ransom.GandCrab.Generic?

Ransom.GandCrab.Generic removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment