Ransom

What is “Ransom:MSIL/FileCryptor.B!MTB”?

Malware Removal

The Ransom:MSIL/FileCryptor.B!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Ransom:MSIL/FileCryptor.B!MTB virus can do?

    How to determine Ransom:MSIL/FileCryptor.B!MTB?

    

    File Info:
    
crc32: F1F79926
    md5: 9a6aa1f9abc8bff81d6be600636b445d
    name: 9A6AA1F9ABC8BFF81D6BE600636B445D.mlw
    sha1: d52cc4d3ea29a5a34fbe4c7afbff83765a4db3fd
    sha256: 39811d2e1a62564b80670c43315eeaab5ba9ae7dadeeb05ebadc9e0fc470939c
    sha512: 273066681716d9af92aa0ddecd32def1fe7e146dab910966a444e72ce2346d6664eb2d7ea48783b52dd0242d3d67edb4fcce6d894170a7867b2be84b2cc87f94
    ssdeep: 3072:254KqOhcIVib0MVSno3C3lK2lKoo95IB:lOR4bjQzs2to9G
    type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
    

    Version Info:
    
Translation: 0x0000 0x04b0
    LegalCopyright: Copyright xa9  2019
    Assembly Version: 1.0.0.0
    InternalName: Bytelocker.exe
    FileVersion: 1.0.0.0
    CompanyName: 
    LegalTrademarks: 
    Comments: 
    ProductName: Bytelocker
    ProductVersion: 1.0.0.0
    FileDescription: Bytelocker
    OriginalFilename: Bytelocker.exe

    Ransom:MSIL/FileCryptor.B!MTB also known as:

    K7AntiVirusTrojan ( 005604741 )
    Elasticmalicious (high confidence)
    DrWebTrojan.Encoder.33375
    CynetMalicious (score: 85)
    ALYacTrojan.Ransom.HiddenTear
    CylanceUnsafe
    ZillyaTrojan.Filecoder.Win32.17609
    SangforTrojan.Win32.Save.a
    CrowdStrikewin/malicious_confidence_100% (W)
    AlibabaRansom:MSIL/FileCryptor.436571b1
    K7GWTrojan ( 005604741 )
    Cybereasonmalicious.9abc8b
    CyrenW32/Ransom.OKKG-0966
    ESET-NOD32a variant of MSIL/Filecoder.XL
    APEXMalicious
    AvastWin32:MalwareX-gen [Trj]
    KasperskyHEUR:Trojan.Win32.Generic
    BitDefenderGen:Heur.Ransom.HiddenTears.1
    MicroWorld-eScanGen:Heur.Ransom.HiddenTears.1
    TencentWin32.Trojan.Generic.Hupm
    Ad-AwareGen:Heur.Ransom.HiddenTears.1
    SophosMal/Generic-S
    BitDefenderThetaGen:NN.ZemsilF.34608.nm0@a0L75Gi
    TrendMicroRansom.MSIL.BYTELOCKER.SM
    McAfee-GW-EditionArtemis!Trojan
    FireEyeGen:Heur.Ransom.HiddenTears.1
    EmsisoftTrojan.FileCoder (A)
    SentinelOneStatic AI – Malicious PE
    AviraHEUR/AGEN.1130184
    MicrosoftRansom:MSIL/FileCryptor.B!MTB
    ArcabitTrojan.Ransom.HiddenTears.1
    AegisLabTrojan.Win32.Generic.4!c
    ZoneAlarmHEUR:Trojan.Win32.Generic
    GDataMSIL.Trojan-Ransom.Unlucky.A
    TACHYONRansom/W32.DN-ByteLocker.223744
    AhnLab-V3Trojan/Win32.RL_Generic.C4260507
    McAfeeArtemis!9A6AA1F9ABC8
    MAXmalware (ai score=100)
    VBA32TScope.Trojan.MSIL
    MalwarebytesRansom.ByteLocker
    PandaTrj/GdSda.A
    TrendMicro-HouseCallRansom.MSIL.BYTELOCKER.SM
    RisingRansom.HiddenTear!8.DC9E (CLOUD)
    IkarusTrojan-Ransom.FileCrypter
    MaxSecureTrojan.Malware.7164915.susgen
    FortinetMSIL/Filecoder.TA!tr
    AVGWin32:MalwareX-gen [Trj]
    Qihoo-360Win32/Ransom.Generic.HgIASQMA

    How to remove Ransom:MSIL/FileCryptor.B!MTB?

    Ransom:MSIL/FileCryptor.B!MTB removal tool
    • Download and install GridinSoft Anti-Malware.
    • Open GridinSoft Anti-Malware and perform a “Standard scan“.
    • “Move to quarantine” all items.
    • Open “Tools” tab – Press “Reset Browser Settings“.
    • Select proper browser and options – Click “Reset”.
    • Restart your computer.

    You may also like

    About the author

    Paul Valéry

    I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

    View all posts

    Leave a Comment