Ransom:MSIL/Cryptolocker.DV!MTB removal instruction

The Ransom:MSIL/Cryptolocker.DV!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom:MSIL/Cryptolocker.DV!MTB virus can do?

Anomalous binary characteristics

How to determine Ransom:MSIL/Cryptolocker.DV!MTB?


File Info:
crc32: 19C53985
md5: d2ee4d4e50b964f14146648677e13d07
name: D2EE4D4E50B964F14146648677E13D07.mlw
sha1: 49c16707d421d47e921d6f768084739e5835a91d
sha256: ebf5012c25403542578bcc2ce9d58459f23bf8bf8ad17ad91bb605c6664d3231
sha512: f343208cd432f3c9d2c66538686c99922726e12415363f2a0f0e54834cc48a68eda218224fffd2f54ff28502147a64d08448786ac4066d3bbc5fc8056a71fcd7
ssdeep: 768:3Wdxk5uhuKy+VdAKbvtsTGH+GkKDobtYcFtVc6K:1bKl5bvtsqeR7tVcl
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  Qvoid 2020 - 2021
Assembly Version: 2.0.0.0
InternalName: Release.exe
FileVersion: 1.0.0.0
CompanyName: Qvoid
LegalTrademarks: 
Comments: By Team-STZ
ProductName: Discord Nitro Generator
ProductVersion: 1.0.0.0
FileDescription: Discord Nitro Generator
OriginalFilename: Release.exe

Ransom:MSIL/Cryptolocker.DV!MTB also known as:

DrWeb	Trojan.Encoder.33916
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.46377954
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
BitDefender	Trojan.GenericKD.46377954
Cybereason	malicious.7d421d
Symantec	Ransom.Wannacry
ESET-NOD32	a variant of MSIL/Filecoder.AID
APEX	Malicious
Kaspersky	HEUR:Trojan-Ransom.MSIL.Agent.gen
Alibaba	Ransom:MSIL/Cryptolocker.95ba01e1
MicroWorld-eScan	Trojan.GenericKD.46377954
Ad-Aware	Trojan.GenericKD.46377954
Sophos	Mal/Generic-S
Comodo	Heur.Corrupt.PE@1z141z3
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.d2ee4d4e50b964f1
Emsisoft	Trojan.FileCoder (A)
SentinelOne	Static AI – Malicious PE
Avira	TR/Ransom.decyj
eGambit	Unsafe.AI_Score_100%
Microsoft	Ransom:MSIL/Cryptolocker.DV!MTB
AegisLab	Trojan.MSIL.Agent.j!c
GData	Trojan.GenericKD.46377954
AhnLab-V3	Malware/Win.Generic.C4457519
MAX	malware (ai score=81)
Malwarebytes	Malware.AI.3679637840
Panda	Trj/GdSda.A
Rising	Ransom.Agent!8.6B7 (CLOUD)
Ikarus	Trojan-Ransom.FileCrypter
Fortinet	W32/Agent.AID!tr
Paloalto	generic.ml

How to remove Ransom:MSIL/Cryptolocker.DV!MTB?

Ransom:MSIL/Cryptolocker.DV!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X