How to remove “Ransom.VirLock.58”?

The Ransom.VirLock.58 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.VirLock.58 virus can do?

Behavioural detection: Executable code extraction – unpacking
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Ransom.VirLock.58?


File Info:
name: 2C726C8BA556A21358F4.mlw
path: /opt/CAPEv2/storage/binaries/95ca19c3225c8c7f4395962277bcd7070011a13ccb3adca41a1869c811bbcfaf
crc32: 486C34D4
md5: 2c726c8ba556a21358f41d32f85fa935
sha1: 664f73d905694cc83828b659e41a88358dfb6f87
sha256: 95ca19c3225c8c7f4395962277bcd7070011a13ccb3adca41a1869c811bbcfaf
sha512: 3f0f279716625811374ac110a626c1254e922df3a0639bb008eee12873ac14f33e56fee67ca3aa640cdf2ed5fdeb7e87e45fca5a47369079a405b8272c9483f7
ssdeep: 24576:TI060UrXs71ypjzbEG8Mur7Tv4IxBDwvkdAascYGgriGLpx:QrX6yhzAGer77JtwvkdAascYG0iG9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E925BE2F2AC72806D6F4942133B84E69332B6647BB6042679DCB5D2F049B75D2FCF258
sha3_384: b952b6439d7f813740e74428f9bcf0564b85bb3b42be8a5ada089ca8e26e1e42128c81a23b7cd1fde069a73672ca4816
ep_bytes: 81f1074ccb718bf20fcbc1e9092bf233
timestamp: 2015-01-06 00:36:08

Version Info:
0: [No Data]

Ransom.VirLock.58 also known as:

Bkav	W32.AIDetectMalware
Lionic	Virus.Win32.PolyRansom.mfPW
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ransom.VirLock.58
FireEye	Generic.mg.2c726c8ba556a213
Skyhigh	BehavesLike.Win32.VirRansom.dc
McAfee	W32/VirRansom.b!2C726C8BA556
Cylance	unsafe
Sangfor	Ransom.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Malware:Win32/km_28f00.None
K7GW	Trojan ( 00573f0e1 )
K7AntiVirus	Trojan ( 00573f0e1 )
BitDefenderTheta	Gen:NN.ZexaF.36802.8mW@auKGcIp
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Virlock.AL
APEX	Malicious
ClamAV	Win.Virus.Virlock-6804475-0
BitDefender	Gen:Variant.Ransom.VirLock.58
NANO-Antivirus	Trojan.Win32.Gena.doticp
SUPERAntiSpyware	Ransom.Virlock/Variant
Avast	Win32:SwPatch [Wrm]
Tencent	Win32.Virus.Virlock.Fkjl
Emsisoft	Gen:Variant.Ransom.VirLock.58 (B)
F-Secure	Trojan.TR/Crypt.ZPACK.Gen
DrWeb	Trojan.Packed
VIPRE	Gen:Variant.Ransom.VirLock.58
Trapmine	malicious.moderate.ml.score
Sophos	W32/VirRnsm-N
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=83)
Google	Detected
Avira	TR/Crypt.ZPACK.Gen
Varist	W32/Virlock.N.gen!Eldorado
Antiy-AVL	GrayWare/Win32.VirLock.a
Kingsoft	malware.kb.a.999
Microsoft	Virus:Win32/Nabucur.gen
Xcitium	TrojWare.Win32.Virlock.XU@5xaovq
Arcabit	Trojan.Ransom.VirLock.58
GData	Gen:Variant.Ransom.VirLock.58
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Virlock.C4224944
Acronis	suspicious
VBA32	SScope.Virus.Virlock
ALYac	Gen:Variant.Ransom.VirLock.58
TACHYON	Virus/W32.VirRansom
Malwarebytes	Trojan.VirLock
Panda	Generic Suspicious
Rising	Virus.VirLock!1.A08A (CLASSIC)
Ikarus	Virus.Win32.Virlock
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Virlock.B
AVG	Win32:SwPatch [Wrm]
Cybereason	malicious.ba556a
DeepInstinct	MALICIOUS

How to remove Ransom.VirLock.58?

Ransom.VirLock.58 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X