Ransom Trojan

Trojan-Ransom.Win32.Gen.aaxs malicious file

Malware Removal

The Trojan-Ransom.Win32.Gen.aaxs is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Gen.aaxs virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • Unconventionial language used in binary resources: Hebrew
  • Checks the version of Bios, possibly for anti-virtualization
  • Collects information to fingerprint the system

How to determine Trojan-Ransom.Win32.Gen.aaxs?


File Info:

crc32: 7B9E5D92
md5: a8a1b49c862ba513ba696c2300f573aa
name: A8A1B49C862BA513BA696C2300F573AA.mlw
sha1: cf3e52dcc01d7cfffe4980304bf22467ba691b27
sha256: e74ca50aae8491e3f83395cbdec8da0ae01dea814b3cf7db152009aa237f7b95
sha512: 85e7d981e14d707bff756b8396c0dc332e83c5a7c28160b395deccca96ffec29e8184b8c32fa97ed18f954f446af41bd066ece9b4522462e63b0c8f9aabf537b
ssdeep: 49152:fjOsKLk9nq6hptoM4Sijf2PTlGA7edXpaGNglw1hyi4W46K0N3SEJSo2HPelrCe:fjOsKLk9nq6hptoM4Sijf2PTlGA7edX
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright ABG Systems Ltd.(C) 2019
InternalName: OrevNsc (PC50).exe
FileVersion: 10.1.21.04221504
ProductName: OrevNsc (PC50)
ProductVersion: 10.1.21.04221504
FileDescription: Orev Network Manager
OriginalFilename: OrevNsc (PC50).exe
Translation: 0x0409 0x04b0

Trojan-Ransom.Win32.Gen.aaxs also known as:

ALYacTrojan.GenericKD.36815210
CylanceUnsafe
AlibabaRansom:Win32/Generic.fe2710a8
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Ransom.Win32.Gen.aaxs
BitDefenderTrojan.GenericKD.36815210
MicroWorld-eScanTrojan.GenericKD.36815210
Ad-AwareTrojan.GenericKD.36815210
SophosGeneric ML PUA (PUA)
BitDefenderThetaGen:NN.ZexaCO.34688.Qv0@aGLZX6kO
FireEyeTrojan.GenericKD.36815210
EmsisoftTrojan.GenericKD.36815210 (B)
JiangminTrojan.Gen.biv
GDataTrojan.GenericKD.36815210
MAXmalware (ai score=89)
VBA32BScope.TrojanRansom.Gen
MalwarebytesMalware.AI.3144338661
PandaTrj/GdSda.A
RisingRansom.Gen!8.DE83 (CLOUD)
FortinetW32/Gen.AAXS!tr
AVGWin32:Malware-gen

How to remove Trojan-Ransom.Win32.Gen.aaxs?

Trojan-Ransom.Win32.Gen.aaxs removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment