Ransom.247 (B) removal

The Ransom.247 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.247 (B) virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Ransom.247 (B)?


File Info:
crc32: 079AACFD
md5: 8a6dd817856fb39be0796067362ea050
name: 8A6DD817856FB39BE0796067362EA050.mlw
sha1: 3a45b7f9bc48f02fea24515bbd62d4a50099afa3
sha256: 599cc81cb2ec5b42c43caa91a22aaafae525ff892c454a97067d5f0c524e9a65
sha512: 6d6be2b3471a8a514a89cab2ddc6df085e52cea30758790503418829f7fb85f7a98530b6ef141d66e3ac5ebf781a0b16e798bba5a2efc2b529fa39a9bc65df4c
ssdeep: 6144:8VbjzQDSNvBcS0XflSLgiJWS/YmeuFP5aTQAkHuQuTgcfjarHHswmLrbu2gyaqm:Iz4TSSflI/YmpK0pdWgKRa2gyaqmEE
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: Exocrypt.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Exocrypt
ProductVersion: 1.0.0.0
FileDescription: Exocrypt
OriginalFilename: Exocrypt.exe

Ransom.247 (B) also known as:

K7AntiVirus	Trojan ( 0052e40a1 )
Lionic	Trojan.Win32.Generic.4!c
CAT-QuickHeal	Trojan.GenericFC.S6059108
ALYac	Trojan.Ransom.Exocrypt
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Trojan ( 0052e40a1 )
Cybereason	malicious.7856fb
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Filecoder.MZ
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Kaspersky	Trojan-Ransom.MSIL.Agent.fqjv
BitDefender	Gen:Variant.Ransom.247
NANO-Antivirus	Trojan.Win32.Ransom.falfat
MicroWorld-eScan	Gen:Variant.Ransom.247
Tencent	Malware.Win32.Gencirc.11491fc4
Ad-Aware	Gen:Variant.Ransom.247
Sophos	Mal/Generic-R + Mal/Ramsil-X
Comodo	Malware@#197y2drde01wy
BitDefenderTheta	Gen:NN.ZemsilF.34110.Dm0@aaFDBde
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_EXOCRYPT.THDBDAH
McAfee-GW-Edition	Ransom-Exocrypt!8A6DD817856F
FireEye	Gen:Variant.Ransom.247
Emsisoft	Gen:Variant.Ransom.247 (B)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1137893
Antiy-AVL	Trojan/Generic.ASMalwS.25D766B
Microsoft	Trojan:Win32/AgentTesla!ml
Arcabit	Trojan.Ransom.247
GData	Gen:Variant.Ransom.247
AhnLab-V3	Trojan/Win32.MSIL.C2472168
McAfee	Ransom-Exocrypt!8A6DD817856F
MAX	malware (ai score=98)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Ransom.FileCryptor
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_EXOCRYPT.THDBDAH
Yandex	Trojan.Filecoder!wkwTalGKLxo
Ikarus	Trojan-Ransom.FileCrypter
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Filecoder.MZ!tr
AVG	Win32:MalwareX-gen [Trj]
Paloalto	generic.ml

How to remove Ransom.247 (B)?

Ransom.247 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X