Ransom.LockCrypt removal instruction

The Ransom.LockCrypt is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.LockCrypt virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Ransom.LockCrypt?


File Info:
crc32: 59591F14
md5: 16cc2bb5dd1eec0b8dcafbb4e81aedd0
name: 16CC2BB5DD1EEC0B8DCAFBB4E81AEDD0.mlw
sha1: 4a8d4d836537bfcac116d6e370ad816167a9a7cf
sha256: 16c919a7954dbc3964283b73be507bd971b94dd4d173d8dd0f3b4a43c96682d4
sha512: 1b6431adb43be669345fa5d5034b58e2bc6298615cb4d773bb3f1d0cb04a4e0d2794212b7d26cf32cc81070bd47abf375b07db94afd6fbb3dbac602f65ed33d6
ssdeep: 192:GAIesQXl7J5+xDk4LmWm6VlsT63Ogc6y9x6+:Ma7JKDk4LmWm6Vlse375yi
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Ransom.LockCrypt also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 005451b81 )
Lionic	Trojan.Win32.Razy.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
Alibaba	Trojan:Application/TibsPk.0b85f5d1
K7GW	Trojan ( 005451b81 )
Cybereason	malicious.36537b
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Sophos	Mal/Generic-R + Mal/TibsPk-A
Comodo	Malware@#2i7rl16u838ib
BitDefenderTheta	Gen:NN.ZexaF.34142.aqW@aO5h9xo
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.QLowZones.xm
FireEye	Generic.mg.16cc2bb5dd1eec0b
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_93%
Antiy-AVL	Trojan/Generic.ASMalwS.2AA5687
Microsoft	Trojan:Win32/Occamy.C16
AhnLab-V3	Malware/Win32.Generic.C2964267
Acronis	suspicious
McAfee	GenericRXHA-YL!16CC2BB5DD1E
Malwarebytes	Ransom.LockCrypt
Panda	Trj/GdSda.A
Rising	Trojan.Generic@ML.80 (RDML:0oK0kSHImmU2yW/UAnmy6g)
MaxSecure	Trojan.Malware.74018050.susgen
Fortinet	W32/TibsPk.A!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Ransom.LockCrypt?

Ransom.LockCrypt removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X