Ransom.VoidCrypt (file analysis)

The Ransom.VoidCrypt is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.VoidCrypt virus can do?

How to determine Ransom.VoidCrypt?


File Info:
crc32: 169ECB26
md5: 67bf76912e3939ab23cb9a7245c249fc
name: 67BF76912E3939AB23CB9A7245C249FC.mlw
sha1: d2e14f8f371dea942915f9c09d9653ee43c87e90
sha256: 72de2bbcd19053d9f23c35a8a52ff9babd9198f9abe8baef0464669142b858db
sha512: 3a732e355927a5ef4b406c5019276c4870c4fca22bf219acc9238233dd16eeb8814850537051e019e7170516a4462a2b00857c2cb7a748e4f3204fe82f8cc61c
ssdeep: 24576:bVQxv2TfNlbZ91iI/GhHE5UEL9v9tJu4BAkeOdb+AYBPTBuoZlP6Q1B:mxcfiwGW5UKg1FFB6CB
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Ransom.VoidCrypt also known as:

K7AntiVirus	Trojan ( 005640be1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.32640
Cynet	Malicious (score: 100)
ALYac	Trojan.Ransom.VoidCrypt
Cylance	Unsafe
Zillya	Trojan.Generic.Win32.1234049
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/Amnesia.a4d8dc80
K7GW	Trojan ( 005640be1 )
Cybereason	malicious.12e393
Cyren	W32/Ransom.BHCK-6397
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Filecoder.Ouroboros.E
APEX	Malicious
Avast	Win32:RansomX-gen [Ransom]
ClamAV	Win.Ransomware.Vipasana-9783618-1
Kaspersky	UDS:Trojan-Ransom.Win32.Generic
BitDefender	DeepScan:Generic.Ransom.AmnesiaE.9E613836
NANO-Antivirus	Trojan.Win32.Encoder.hweqgt
MicroWorld-eScan	DeepScan:Generic.Ransom.AmnesiaE.9E613836
Tencent	Malware.Win32.Gencirc.10ce0cfd
Ad-Aware	DeepScan:Generic.Ransom.AmnesiaE.9E613836
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34690.rvW@aKSOD@bi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	GenericRXMJ-AK!67BF76912E39
FireEye	Generic.mg.67bf76912e3939ab
Emsisoft	DeepScan:Generic.Ransom.AmnesiaE.9E613836 (B)
Jiangmin	Trojan.Zudochka.bn
Avira	HEUR/AGEN.1138883
eGambit	Unsafe.AI_Score_96%
Microsoft	Ransom:Win32/Amnesia.MK!MTB
Arcabit	DeepScan:Generic.Ransom.AmnesiaE.9E613836
AegisLab	Trojan.Win32.Generic.j!c
GData	DeepScan:Generic.Ransom.AmnesiaE.9E613836
AhnLab-V3	Trojan/Win32.RL_FileCoder.R358379
McAfee	GenericRXMJ-AK!67BF76912E39
MAX	malware (ai score=89)
VBA32	BScope.Trojan.DelShad
Malwarebytes	Ransom.VoidCrypt
Panda	Trj/GdSda.A
Rising	Ransom.Agent!1.C4E7 (CLOUD)
Ikarus	Trojan-Ransom.Ouroboros
Fortinet	W32/AmnesiaE.58ED!tr.ransom
AVG	Win32:RansomX-gen [Ransom]
Paloalto	generic.ml

How to remove Ransom.VoidCrypt?

Ransom.VoidCrypt removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X