Ransom

How to remove “Ransom:MSIL/Cryptolocker.EE!MTB”?

Malware Removal

The Ransom:MSIL/Cryptolocker.EE!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Ransom:MSIL/Cryptolocker.EE!MTB virus can do?

  • Network activity detected but not expressed in API logs

How to determine Ransom:MSIL/Cryptolocker.EE!MTB?



File Info:

crc32: 9C9FA042
md5: b70b0c2782c2fbe910d384a3944c774b
name: B70B0C2782C2FBE910D384A3944C774B.mlw
sha1: 6d5566ba64fceadc4857d82771a93704f4fb2af9
sha256: f0b101d27a6ec5ea1071b3a97e481a9bfbb1b01e6973680d5206a96acb5e0b3c
sha512: a8c8bb6e2d8af2f11477a664f9661026c0065e67af3fac579f22d3882c29664b99e783fdcb9d8a22219ce976565ee937ddf8746ac39d42cc1b20d386426a104d
ssdeep: 768:ZXyqL4tQ6j3OQpzkkqMQaaU2UaodqVLQWxLFSH0/7Hauu14aCGnJ582ejpw8:ZXyqL4bO7eQ8/WxL9Fu14YEpw8
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2017
Assembly Version: 1.0.0.0
InternalName: AslaHora Ransomware.exe
FileVersion: 1.0.0.0
ProductName: AslaHora Ransomware
ProductVersion: 1.0.0.0
FileDescription: AslaHora Ransomware
OriginalFilename: AslaHora Ransomware.exe

Ransom:MSIL/Cryptolocker.EE!MTB also known as:

K7AntiVirusTrojan ( 0050102a1 )
LionicTrojan.MSIL.Encoder.j!c
DrWebTrojan.KillProc2.16258
CynetMalicious (score: 99)
CAT-QuickHealTrojanRansom.MSIL
ALYacTrojan.Ransom.Filecoder
SangforRansom.MSIL.Encoder.gen
CrowdStrikewin/malicious_confidence_60% (W)
AlibabaTrojan:MSIL/Filecoder.ab371f38
K7GWTrojan ( 0050102a1 )
CyrenW32/Trojan.WBSN-8973
SymantecTrojan.Gen.2
ESET-NOD32a variant of MSIL/Filecoder.DP
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan-Ransom.MSIL.Encoder.gen
BitDefenderTrojan.GenericKD.46593583
MicroWorld-eScanTrojan.GenericKD.46593583
Ad-AwareTrojan.GenericKD.46593583
SophosMal/Generic-R + Mal/StupCryp-A
BitDefenderThetaGen:NN.ZemsilF.34796.dq0@a0RaQjl
TrendMicroRansom_Encoder.R03FC0RGB21
McAfee-GW-EditionRansom-AslHora!B70B0C2782C2
FireEyeTrojan.GenericKD.46593583
EmsisoftTrojan.FileCoder (A)
SentinelOneStatic AI – Suspicious PE
AviraTR/Ransom.twbbh
MicrosoftRansom:MSIL/Cryptolocker.EE!MTB
ArcabitTrojan.Generic.D2C6F62F
GDataTrojan.GenericKD.46593583
AhnLab-V3Trojan/Win.Generic.C4545861
McAfeeRansom-AslHora!B70B0C2782C2
MAXmalware (ai score=81)
VBA32TScope.Trojan.MSIL
MalwarebytesRansom.AslaHora
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_Encoder.R03FC0RGB21
IkarusTrojan-Ransom.FileCrypter
MaxSecureTrojan.Malware.73702460.susgen
FortinetMSIL/Filecoder.FG!tr.ransom
AVGWin32:Trojan-gen
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Encoder.HgIASX8A

How to remove Ransom:MSIL/Cryptolocker.EE!MTB?

Ransom:MSIL/Cryptolocker.EE!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment