What is “Ransom.43 (B)”?

The Ransom.43 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.43 (B) virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Ransom.43 (B)?


File Info:
crc32: 63057CA4
md5: c6f84c547847dc48a596649e75dea2d0
name: C6F84C547847DC48A596649E75DEA2D0.mlw
sha1: 15bef7b4d644cf56cd9de860c4f27830d71666b6
sha256: 2a8744a1d60fc1cafe47d67067d0e17f3e55d3cedf2d9f2991d6fbf5b488b3d3
sha512: ebaf74837a3b92e1ebfb5072b8c511baf7b0e6c0b915f00001faade51685a669566f856837879d77226b1c825ca5990eab1d1a92998b085318fa1e7487e1c447
ssdeep: 3072:0rFX7lKdR/wpBRGrkZZYwgjEyA0NQkz52xwO:w58prkZvgAyPH8xw
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Ransom.43 (B) also known as:

K7AntiVirus	Riskware ( 0040eff71 )
ALYac	Gen:Variant.Ransom.43
Zillya	Worm.VBNA.Win32.254602
BitDefender	Gen:Variant.Ransom.43
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.47847d
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
NANO-Antivirus	Trojan.Win32.Johnnie.ewvoop
SUPERAntiSpyware	Trojan.Agent/Gen2
MicroWorld-eScan	Gen:Variant.Ransom.43
Ad-Aware	Gen:Variant.Ransom.43
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZexaE.34738.kuW@aGVJjydi
FireEye	Gen:Variant.Ransom.43
Emsisoft	Gen:Variant.Ransom.43 (B)
Antiy-AVL	Trojan/Generic.ASMalwS.103403C
AegisLab	Riskware.Win32.Generic.1!c
GData	Gen:Variant.Ransom.43
VBA32	Trojan.Occamy
Yandex	Trojan.GenAsa!RrfejYGZpHY
Ikarus	Trojan.Agent

How to remove Ransom.43 (B)?

Ransom.43 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X