Ransom

How to remove “Heur.Ransom.Lukitos.1 (B)”?

Malware Removal

The Heur.Ransom.Lukitos.1 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Heur.Ransom.Lukitos.1 (B) virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs

How to determine Heur.Ransom.Lukitos.1 (B)?


File Info:

crc32: 72598835
md5: ba48d47ce1b2b2032132f6d7e4261146
name: BA48D47CE1B2B2032132F6D7E4261146.mlw
sha1: 7871801fa838b566929cec92a2a48fef7a95bfd2
sha256: 95e8c72809ce1ba7d6b773a22941fdf04c2f9e42c48e7ef52efe3b3210302229
sha512: db077c5fc9327c818db5e9e1ddfe757662103c8c30bf2f4ae0797c25a9c04e267d416548fa8b892c46e2818f33a62e617a37d6288a9b723ca573a9e4edba1f51
ssdeep: 3072:m+kPdOgCHwGvmylZBtM+dAvSym4F/nU/FBKysbCQbRDG0VAMVIxcyCQYD5A38+G:UR/
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Heur.Ransom.Lukitos.1 (B) also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Heur.Ransom.Lukitos.1
FireEyeGeneric.mg.ba48d47ce1b2b203
CAT-QuickHealRansom.Exxroute.A3
McAfeeRansomware-FMJ!BA48D47CE1B2
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Generic.4!c
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005137001 )
BitDefenderGen:Heur.Ransom.Lukitos.1
K7GWTrojan ( 005053441 )
Cybereasonmalicious.ce1b2b
BitDefenderThetaGen:NN.ZexaF.34590.gmW@aWUnB4b
CyrenW32/S-2f0713f6!Eldorado
SymantecPacked.Generic.493
ESET-NOD32a variant of Win32/Kryptik.HHAH
BaiduWin32.Trojan.Kryptik.bjk
APEXMalicious
AvastWin32:Filecoder-AY [Trj]
ClamAVWin.Ransomware.Cerber-6162245-0
KasperskyHEUR:Trojan.Win32.Generic
AlibabaRansom:Win32/Spora.614f7535
NANO-AntivirusTrojan.Win32.Spora.elngex
RisingTrojan.Ransom.GlobeImposter!1.AF70 (CLOUD)
Ad-AwareGen:Heur.Ransom.Lukitos.1
SophosML/PE-A + Mal/Elenoocka-E
ComodoTrojWare.Win32.Crypt.C@7vajd0
F-SecureHeuristic.HEUR/AGEN.1116787
DrWebTrojan.PWS.Sphinx.2
ZillyaTrojan.Generic.Win32.1246008
TrendMicroRansom_CERBER.SM37
McAfee-GW-EditionBehavesLike.Win32.Ransomware.cm
EmsisoftGen:Heur.Ransom.Lukitos.1 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Spora.w
MaxSecureTrojan.Malware.7164915.susgen
AviraHEUR/AGEN.1116787
MAXmalware (ai score=99)
Antiy-AVLTrojan[Ransom]/Win32.Spora
MicrosoftRansom:Win32/Spora.A
ArcabitTrojan.Ransom.Lukitos.1
AhnLab-V3Trojan/Win32.Cerber.C1784797
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Heur.Ransom.Lukitos.1
CynetMalicious (score: 100)
VBA32BScope.TrojanPSW.Sphinx
ALYacGen:Heur.Ransom.Lukitos.1
MalwarebytesCerber.Ransom.Encrypt.DDS
PandaTrj/Genetic.gen
TrendMicro-HouseCallRansom_CERBER.SM37
TencentMalware.Win32.Gencirc.10b3e2f1
YandexTrojan.GenAsa!W6GpnQgfy2M
IkarusTrojan.Ransom.Spora
eGambitUnsafe.AI_Score_100%
FortinetW32/Kryptik.GKVH!tr
AVGWin32:Filecoder-AY [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Ransom.Filecoder.HxQBAScA

How to remove Heur.Ransom.Lukitos.1 (B)?

Heur.Ransom.Lukitos.1 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment