How to remove “Ransom.Thanos”?

The Ransom.Thanos is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.Thanos virus can do?

How to determine Ransom.Thanos?


File Info:
crc32: 6ED5120F
md5: fbad77e0e8c402f55bea9c8d0f0ec982
name: FBAD77E0E8C402F55BEA9C8D0F0EC982.mlw
sha1: c8d3f04b61752843e24f02466ba5b25c6fb30175
sha256: a0e20c580e8a82f4103af90d290f762bd847fadd4eba1f5cd90e465bb9f810b7
sha512: d3f7a0fe79ea521775bbe6f12216c5868743a237e48fe21e6ca20af1c316f908cc3a8ccd98f29bd836320ffbda3ee457aa6968a2938764d479b63cfa03efc4c7
ssdeep: 3072:C//h0n1c1+B9+an7DKamAJinHaFa5z7F9LlL6EN4LDsR7rXqF8oUIlwqMsx9bKb:wGeycsKWi6FaRFnmwXqF8RLqMsx9b
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright 2019 j0JIcPt4CYfwRmC
Assembly Version: 4.5.0.0
InternalName: RQFpShDUFIa91Qg
FileVersion: 4.5.0.0
CompanyName: dXKAklT4EDjEJ9L 8d3ipEhsrC0zIjW
LegalTrademarks: tTwxeNI1S15pc8u wLVrds4Bh6Pj0KK
ProductName: yrVqlycv9crBa85
ProductVersion: 4.5.0.0
FileDescription: Bonjour Service
OriginalFilename: jR5SmTbjJTzSO1O

Ransom.Thanos also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.EncoderNET.31368
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (D)
Cybereason	malicious.b61752
Symantec	Ransom.HiddenTear!g1
ESET-NOD32	a variant of MSIL/Filecoder.Thanos.A
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefenderTheta	Gen:NN.ZemsilF.34678.nm0@a8ig6hh
TrendMicro	Ransom.Win32.THANOS.SM
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
FireEye	Generic.mg.fbad77e0e8c402f5
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_98%
Microsoft	Ransom:MSIL/Thanos.PA!MTB
AhnLab-V3	Malware/Win.Generic.C4405854
Acronis	suspicious
Malwarebytes	Ransom.Thanos
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom.Win32.THANOS.SM
Ikarus	Trojan-Ransom.Thanos
Fortinet	MSIL/Thanos.A!tr.ransom

How to remove Ransom.Thanos?

Ransom.Thanos removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X