Ransom.Teslacrypt.D4 removal tips

The Ransom.Teslacrypt.D4 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.Teslacrypt.D4 virus can do?

The binary likely contains encrypted or compressed data.

How to determine Ransom.Teslacrypt.D4?


File Info:
crc32: AB015881
md5: 8a7d0772ef730d4ae0ed4a95e4b306c4
name: 8A7D0772EF730D4AE0ED4A95E4B306C4.mlw
sha1: de7c92bd1048f024c7a2d1335f0c0af2c8061f86
sha256: 7d01918ce8c1b8aac0fad4531d5b12906e9a852a4f4a50ab80284233caa59001
sha512: 8caa6243688be6c09d2e1b31942940f541da9fbeadadd4024bd88cd347a6a102acea557e206dfce1845ceb1afa0c070927e752eff95572b77f35cb36afe26bc8
ssdeep: 3072:He52iBa8vi2KIskEHgzL17AgY4tD0GG4OfSVljJIow0EnrMZA:He5eSDKI51hXD0jvfAllIcA
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2015
InternalName: Locomote
FileVersion: 127, 124, 249, 46
CompanyName: AOKSoft,Inc.
LegalTrademarks: 
ProductName: Hung Haft
ProductVersion: 125, 49, 173, 26
FileDescription: Girding
OriginalFilename: Lychees.exe

Ransom.Teslacrypt.D4 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Vucha.4!c
Elastic	malicious (high confidence)
DrWeb	Win32.HLLM.Reset.479
CAT-QuickHeal	Ransom.Teslacrypt.D4
Cylance	Unsafe
Zillya	Trojan.Nimnul.Win32.490
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 0055dd191 )
K7AntiVirus	Trojan ( 0055dd191 )
Symantec	Trojan.Gen
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Vucha.dc
Alibaba	Trojan:Win32/Vucha.a12323cf
NANO-Antivirus	Trojan.Win32.Reset.dyztse
Tencent	Malware.Win32.Gencirc.114c2d17
Sophos	Mal/Generic-S
Comodo	Malware@#1jnf7ouu3i1f9
TrendMicro	Ransom_HPLOCKY.SM1
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.8a7d0772ef730d4a
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Nimnul.at
eGambit	Unsafe.AI_Score_94%
Antiy-AVL	Trojan/Generic.ASMalwS.15CE2E6
Microsoft	Trojan:Win32/Dynamer!ac
McAfee	Artemis!8A7D0772EF73
VBA32	SScope.Malware-Cryptor.Drixed
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom_HPLOCKY.SM1
Yandex	Trojan.GenAsa!9sjSl6cnsGM
Fortinet	W32/Kryptik.EFAD!tr

How to remove Ransom.Teslacrypt.D4?

Ransom.Teslacrypt.D4 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X