Trojan:Win32/Gandcrab.AF (file analysis)

The Trojan:Win32/Gandcrab.AF file is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Trojan:Win32/Gandcrab.AF virus can do?

• Freezing computer.
• New home page in browsers.
• Ads and pop-ups on desktop and browser.
• Very slow loading speed of webpages.
• Computer work slower then usual.

How to determine Trojan:Win32/Gandcrab.AF?

General:
Operating System: Windows 7 / 8 / 8.1 / 10
Virus Name: Generic.mg.9bf840f06ecfe696


File Info:
Name: upp.exe
Size: 118272
Type: PE32 executable (GUI) Intel 80386, for MS Windows
MD5: 9bf840f06ecfe69691fe18963c38bb72
SHA1: 325f060d68e37809507f8a497f8fa32a02973d1e
SH256: 659660170905c2aaf29671a9dc5429412e3fb48916eb03d8d499c80e12df109b
 
Version Info:
 [No Data] 

Trojan:Win32/Gandcrab.AF also known as:

APEX	Malicious
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.32247.hu0@a01uBNn
CrowdStrike	win/malicious_confidence_100% (W)
Cybereason	malicious.d68e37
Cylance	Unsafe
Endgame	malicious (high confidence)
FireEye	Generic.mg.9bf840f06ecfe696
Invincea	heuristic
Malwarebytes	Trojan.MalPack.GS
Microsoft	Trojan:Win32/Gandcrab.AF
Qihoo-360	HEUR/QVM10.1.29BF.Malware.Gen
Rising	Downloader.Dofoil!8.322 (TFE:6:G8BmgUOlvAU)
Symantec	Packed.Generic.525
VBA32	BScope.Trojan.Dynamer
Webroot	W32.Trojan.Gen
ZoneAlarm	UDS:DangerousObject.Multi.Generic

How to remove Trojan:Win32/Gandcrab.AF?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.