Ransom

Ransom.Generic.1 removal

Malware Removal

The Ransom.Generic.1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom.Generic.1 virus can do?

  • A process created a hidden window
  • Unconventionial language used in binary resources: Russian
  • Uses Windows utilities for basic functionality
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Ransom.Generic.1?


File Info:

crc32: 4CBAD1CD
md5: f148227cde7e2de7a46e9356765ad5ab
name: F148227CDE7E2DE7A46E9356765AD5AB.mlw
sha1: ea4cfc4cfcaf3f143360a72b3ea5a7f528600edb
sha256: a0189bb8ec672a10cd66f50d4528933a893292a0d92d69e11df18ff4282703ff
sha512: bfb3af16346c3fddf81aece9ace39f8e47b681d785bd49dcd33183376f8a57c03db7582f88185b4eb31c606ad66bc5c072aecbf90282a8ec76e06c345a1b1d7b
ssdeep: 24576:GF5MQ+Tz0w2NGqT98lHmv3Dh0G+VseFOWlxhWS1JDf:OOjN/GaJVZHf
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Ransom.Generic.1 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 005167c61 )
DrWebTrojan.Encoder.13957
CynetMalicious (score: 100)
ALYacTrojan.Ransom.LockBox
CylanceUnsafe
ZillyaTrojan.Filecoder.Win32.8483
SangforTrojan.Win32.Filecoder.8
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Filecoder.ed807056
K7GWTrojan ( 005167c61 )
Cybereasonmalicious.cde7e2
SymantecRansom.Gen
ESET-NOD32Win32/Filecoder.NNN
APEXMalicious
AvastWin32:Malware-gen
BitDefenderGen:Variant.Ransom.Generic.1
NANO-AntivirusTrojan.Win32.Ransom.eroqqb
MicroWorld-eScanGen:Variant.Ransom.Generic.1
TencentWin32.Trojan.Filecoder.Eacu
Ad-AwareGen:Variant.Ransom.Generic.1
SophosMal/Generic-S
BitDefenderThetaAI:Packer.6E8A73641F
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_LOCKBOX.A
McAfee-GW-EditionBehavesLike.Win32.Infected.th
FireEyeGeneric.mg.f148227cde7e2de7
EmsisoftGen:Variant.Ransom.Generic.1 (B)
AviraTR/Ransom.ocnbp
eGambitUnsafe.AI_Score_74%
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftRansom:MacOS/Filecoder
GDataWin32.Trojan-Ransom.Filecoder.BU
AhnLab-V3Unwanted/Win32.Agent.C2070591
McAfeeGenericRXCE-QL!F148227CDE7E
MAXmalware (ai score=100)
MalwarebytesMachineLearning/Anomalous.96%
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_LOCKBOX.A
RisingTrojan.Filecoder!8.68 (CLOUD)
YandexTrojan.GenAsa!+rsQtXdvdMo
IkarusTrojan-Ransom.LockBox
MaxSecureTrojan.Malware.300983.susgen
FortinetGenerik.MRSWBGH!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Ransom.Generic.1?

Ransom.Generic.1 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment