Ransom

Ransom.Crypt0L0cker.23 removal guide

Malware Removal

The Ransom.Crypt0L0cker.23 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom.Crypt0L0cker.23 virus can do?

  • Reads data out of its own binary image
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Ransom.Crypt0L0cker.23?


File Info:

crc32: E25C7F95
md5: 1c8021a3439f14755f8ef7e2c1bf026b
name: 1C8021A3439F14755F8EF7E2C1BF026B.mlw
sha1: 78ed9f10d6ead8ce5a5d9a83beb90f83a8e34913
sha256: b843611df67720a2038e4d743853eacd47abec58ed3a4848730cbf04626d0f9c
sha512: 16f7492da821d9c64d7ecf96932090fb3b1ddb504861dd340261e0ed2e6dd28e84e0d622477c35a56a41ea1bfc35ea2664d1908cfdc7325bc76efd2642431f32
ssdeep: 6144:ewHysO+zjEApTKHaT94knvVYlhP/7jIg9dMRAotU6zcdGwD:VO+zZK6CknvCTjIgrTSpzcIwD
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Ransom.Crypt0L0cker.23 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusRiskware ( 0040eff71 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealRansom.Onion.A
ALYacGen:Variant.Ransom.Crypt0L0cker.23
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Injector.d4e1f9b6
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.3439f1
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.NSIS.Androm.6
MicroWorld-eScanTrojan.NSIS.Androm.6
TencentWin32.Trojan.Generic.Eano
SophosML/PE-A + Mal/Miuref-L
TrendMicroRansom_CERBERENC.SMNS2
McAfee-GW-EditionGenericRXGB-RI!574F16BDFD09
FireEyeGeneric.mg.1c8021a3439f1475
EmsisoftTrojan.NSIS.Androm.6 (B)
SentinelOneStatic AI – Malicious PE
Antiy-AVLTrojan/Generic.ASMalwS.1B9B393
MicrosoftTrojan:Win32/Tnega!ml
ArcabitTrojan.NSIS.Androm.6
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
GDataGen:Variant.Ransom.Crypt0L0cker.23
AhnLab-V3Trojan/Win32.Cerber.R187000
McAfeeArtemis!1C8021A3439F
MAXmalware (ai score=100)
PandaTrj/CI.A
TrendMicro-HouseCallRansom_CERBERENC.SMNS2
RisingTrojan.Generic@ML.98 (RDML:6MoCytKcrMntubV8GQi+7Q)
FortinetW32/Injector.DEKG!tr
AVGWin32:Malware-gen
Qihoo-360Win32/Backdoor.Androm.HyoDEpsA

How to remove Ransom.Crypt0L0cker.23?

Ransom.Crypt0L0cker.23 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment