Ransom

Ransom:Win32/Gpcode.E removal

Malware Removal

The Ransom:Win32/Gpcode.E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom:Win32/Gpcode.E virus can do?

  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs

How to determine Ransom:Win32/Gpcode.E?


File Info:

crc32: 3770D280
md5: 013ab51fa1d0d85fef9cbcb7cc1c941a
name: 013AB51FA1D0D85FEF9CBCB7CC1C941A.mlw
sha1: 66b7a980d19a107e680317ba1ce8822eebeb76b8
sha256: fd12f642fd45e6e3315eab6bf42ed3ec87cc87dee9d5506cea37ab857a9b71df
sha512: c42074bc49750f9b96b52dcb6f461009398739b4a11664603e3b5ba13aa8b78fe33dbeb397a8a4c1daccde57e24bd4447ce3ee99905ada63b618594b8ae44e48
ssdeep: 3072:s+OYsQRHKPkQwQjMLcC+O97K2QfWl18tXgjEPskFArjRj:+EKPkhncC+O9+RfWX8tQjEpGRj
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Ransom:Win32/Gpcode.E also known as:

K7AntiVirusTrojan ( 00270fea1 )
DrWebTrojan.Encoder
CynetMalicious (score: 100)
ALYacTrojan.Encoder.C
CylanceUnsafe
ZillyaTrojan.Gpcode.Win32.4
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/Gpcode.f1e021e5
K7GWTrojan ( 00270fea1 )
Cybereasonmalicious.fa1d0d
CyrenW32/Gpcode.TYUT-0916
SymantecTrojan.Gpcoder
ESET-NOD32Win32/Gpcode.AC
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Trojan.Gpcode-6
KasperskyTrojan-Ransom.Win32.Gpcode.ac
BitDefenderTrojan.Encoder.C
NANO-AntivirusTrojan.Win32.Gpcode.eshn
MicroWorld-eScanTrojan.Encoder.C
TencentWin32.Trojan.Gpcode.Bnu
Ad-AwareTrojan.Encoder.C
SophosMal/Generic-R + Troj/GPCoder-H
ComodoTrojWare.Win32.Gpcode.AC@27v1
BitDefenderThetaGen:NN.ZexaF.34686.imW@auk0Ewk
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionGPcoder
FireEyeGeneric.mg.013ab51fa1d0d85f
EmsisoftTrojan.Encoder.C (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan/Gpcode.d
WebrootW32.Trojan.Encoder
AviraHEUR/AGEN.1133416
Antiy-AVLTrojan[Ransom]/Win32.Gpcode
MicrosoftRansom:Win32/Gpcode.E
ArcabitTrojan.Encoder.C
AegisLabTrojan.Win32.Gpcode.4!c
ZoneAlarmTrojan-Ransom.Win32.Gpcode.ac
GDataTrojan.Encoder.C
TACHYONRansom/W32.Gpcode.131072
McAfeeGPcoder
MAXmalware (ai score=100)
VBA32BScope.TrojanRansom.Gpcode
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/PGPCoder.D
RisingTrojan.Win32.Gpcode.a (CLOUD)
YandexTrojan.GenAsa!hkaIfcOtQu0
IkarusTrojan.Win32.Ransom
eGambitUnsafe.AI_Score_99%
FortinetW32/Gpcode.AC
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Ransom:Win32/Gpcode.E?

Ransom:Win32/Gpcode.E removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment