Should I remove “Ransom.Cryptolocker.4”?

The Ransom.Cryptolocker.4 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.Cryptolocker.4 virus can do?

Authenticode signature is invalid

How to determine Ransom.Cryptolocker.4?


File Info:
name: 4E143B51DBC3970A210F.mlw
path: /opt/CAPEv2/storage/binaries/150ef00120ec0ef7f465839cbb7691251e7793a5c8df97ac0d7ac3ca9b3cbce6
crc32: AA363930
md5: 4e143b51dbc3970a210f2d1d7e4088ed
sha1: 7d0c0ad6b39bcd0f3f71b75f201673b83569e078
sha256: 150ef00120ec0ef7f465839cbb7691251e7793a5c8df97ac0d7ac3ca9b3cbce6
sha512: bd226e93fe09740cc43378acd0096c37784cc725c7c7b8d56c15b574e5ed3b0a46a0dbaca4e5799ba632c0876c1c508b9e148d8efc7696b8910d0a982b344464
ssdeep: 96:oiZ4WPN1XK1sXUbQtKvvSh+KlKeAyFMF4kNmhkmGKb1XxMK6OWCRfEjR:hxXUIKvvSoIKe/MF9cuKb1ykfEjR
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1D9D1E7B2E3C960F1ECC90B72018B763B551B79243795D75C254766A2273AB217F71343
sha3_384: f6e9e05ca6b52f1f59bfca040acaf7c2a4ed8afe187fe0467977db3f49e38a1aac14cfd898615eea7de62140dc577ab1
ep_bytes: a19430001083f81175238b0d24300010
timestamp: 2004-03-13 12:18:00

Version Info:
0: [No Data]

Ransom.Cryptolocker.4 also known as:

Bkav	W32.Common.1A4A7321
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ransom.Cryptolocker.4
CAT-QuickHeal	Trojan.Multi
Skyhigh	Trojan-FIGL!4E143B51DBC3
McAfee	Trojan-FIGL!4E143B51DBC3
Cylance	unsafe
Zillya	Trojan.Injector.Win32.373349
Sangfor	Trojan.Win32.Injector.Vjfq
K7AntiVirus	Trojan ( 0055e3991 )
Alibaba	Trojan:Win32/Injector.30ce0e66
K7GW	Trojan ( 0055e3991 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Ransom.Cryptolocker.4
BitDefenderTheta	Gen:NN.ZedlaF.36680.au4@aypowSei
VirIT	Trojan.Win32.Inject3.AJUL
Symantec	Trojan.Gen.2
ESET-NOD32	Win32/Injector.CWKU
Cynet	Malicious (score: 100)
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Ransom.Cryptolocker.4
NANO-Antivirus	Trojan.Win32.Inject.echnev
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Inject.Ljgl
Emsisoft	Gen:Variant.Ransom.Cryptolocker.4 (B)
F-Secure	Trojan.TR/Injector.CWKU
VIPRE	Gen:Variant.Ransom.Cryptolocker.4
TrendMicro	TROJ_GEN.R002C0PA224
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Injector
Jiangmin	Trojan.Win32.Agent.bo
Webroot	W32.Malware.Gen
Avira	TR/Injector.CWKU
Antiy-AVL	Trojan/Win32.Injector
Kingsoft	malware.kb.a.825
Microsoft	Trojan:Win32/Kovter!rfn
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Variant.Ransom.Cryptolocker.4
Google	Detected
ALYac	Gen:Variant.Ransom.Cryptolocker.4
VBA32	Trojan.Kovter
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002C0PA224
Rising	Ransom.GandCrab!8.F355 (TFE:5:kqkgouoRymG)
Yandex	Trojan.Injector!Vh9rPkFZFk8
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	W32/Injector.CWKU!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Ransom.Cryptolocker.4?

Ransom.Cryptolocker.4 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X