How to remove “Ransom.ByteLocker”?

The Ransom.ByteLocker is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.ByteLocker virus can do?

Network activity detected but not expressed in API logs

How to determine Ransom.ByteLocker?


File Info:
crc32: FF606B72
md5: 6b46363e63bc25066b16d6d4da2215c8
name: 6B46363E63BC25066B16D6D4DA2215C8.mlw
sha1: a2fe180ff05edb157126d071509ab301cd9b9873
sha256: f5eb34f5e897245a54fe22b7187d4916431a9a8b65e2c4a094980677951d7925
sha512: d30cbbf5eaa8aa708497c07cee4e81457946941f35f4a1bf97a3323275c7f210261a4d9b05cf658436a85d87322217627df7e7fa1d0787544948f5fc3755e445
ssdeep: 1536:yNNbvxQqOhcIVmfb0a6VSno7yq2Z3lbZe92js6KDcFEayssH5YuHENJ8cXq:wKqOhcIVib05VSno3C3lK2lKoo95Ii
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2019
Assembly Version: 1.0.0.0
InternalName: Bytelocker.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Bytelocker
ProductVersion: 1.0.0.0
FileDescription: Bytelocker
OriginalFilename: Bytelocker.exe

Ransom.ByteLocker also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
Cybereason	malicious.e63bc2
ESET-NOD32	a variant of MSIL/Filecoder.XL
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Heur.Ransom.HiddenTears.1
MicroWorld-eScan	Gen:Heur.Ransom.HiddenTears.1
Ad-Aware	Gen:Heur.Ransom.HiddenTears.1
F-Secure	Heuristic.HEUR/AGEN.1130184
BitDefenderTheta	Gen:NN.ZemsilF.34744.nm0@a4QsPHo
TrendMicro	Ransom.MSIL.BYTELOCKER.SM
FireEye	Gen:Heur.Ransom.HiddenTears.1
Emsisoft	Trojan.FileCoder (A)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1130184
Microsoft	Ransom:MSIL/FileCryptor.B!MTB
Arcabit	Trojan.Ransom.HiddenTears.1
GData	MSIL.Trojan-Ransom.Unlucky.A
AhnLab-V3	Trojan/Win32.RL_Generic.C4260507
MAX	malware (ai score=86)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Ransom.ByteLocker
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom.MSIL.BYTELOCKER.SM
Ikarus	Trojan-Ransom.FileCrypter
Fortinet	MSIL/Filecoder.TA!tr
AVG	Win32:MalwareX-gen [Trj]

How to remove Ransom.ByteLocker?

Ransom.ByteLocker removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X