Should I remove “Ransom:MSIL/FileCryptor.PA!MTB”?

Malware Removal

The Ransom:MSIL/FileCryptor.PA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Ransom:MSIL/FileCryptor.PA!MTB virus can do?

  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Ransom:MSIL/FileCryptor.PA!MTB?


File Info:

crc32: 539E52F6
md5: 847b06fea8d77a854421cd65ce0c85b5
name: 847B06FEA8D77A854421CD65CE0C85B5.mlw
sha1: dc9842c2d16558f28da3c636d6cc952a70f86709
sha256: 96f50ffb10ae0d8b92d9e7df68de73c8ddeb9d48c934bf8b854363d6bb1fee3a
sha512: 1c9d67c38976d3dfdea57522dd87bdb8f1749f580ed422075ea72152a1a40c2fdc02d275e442bf618ca4b227b85fad835edb92b0d273f5783c2c24373a3cf1bc
ssdeep: 768:hp1COppsbqJ6qABxQ8GFUh6tRPNXyzxcxwqZGSpa122hWScoWScQVtYcFwVc6K:hp1PpGiEQjUho9JdZ582GcocQ9wVcl
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2020
Assembly Version: 1.0.0.0
InternalName: Rasomware2.0.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: Rasomware2.0
ProductVersion: 1.0.0.0
FileDescription: Rasomware2.0
OriginalFilename: Rasomware2.0.exe

Ransom:MSIL/FileCryptor.PA!MTB also known as:

MicroWorld-eScanGen:Variant.Razy.760416
FireEyeGen:Variant.Razy.760416
ALYacGen:Variant.Razy.760416
BitDefenderGen:Variant.Razy.760416
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
KasperskyHEUR:Trojan-Ransom.MSIL.Encoder.gen
Ad-AwareGen:Variant.Razy.760416
EmsisoftTrojan.FileCoder (A)
F-SecureHeuristic.HEUR/AGEN.1137051
TrendMicroRansom.MSIL.CLAY.SMJCDP
McAfee-GW-EditionGenericRXMN-BV!847B06FEA8D7
IkarusTrojan-Ransom.FileCrypter
AviraHEUR/AGEN.1137051
eGambitUnsafe.AI_Score_99%
MAXmalware (ai score=85)
MicrosoftRansom:MSIL/FileCryptor.PA!MTB
GridinsoftRansom.Win32.Filecoder.sd!ni
ArcabitTrojan.Razy.DB9A60
ZoneAlarmHEUR:Trojan-Ransom.MSIL.Encoder.gen
GDataGen:Variant.Razy.760416
AhnLab-V3Trojan/Win32.RL_Ransom.C4212291
McAfeeGenericRXMN-BV!847B06FEA8D7
MalwarebytesRansom.FileCryptor
ESET-NOD32a variant of MSIL/Filecoder.ACE
TrendMicro-HouseCallRansom.MSIL.CLAY.SMJCDP
SentinelOneStatic AI – Malicious PE
FortinetMSIL/Filecoder.62C4!tr.ransom
BitDefenderThetaGen:NN.ZemsilF.34670.im0@aOzBQ2h
AVGWin32:TrojanX-gen [Trj]
CrowdStrikewin/malicious_confidence_80% (D)

How to remove Ransom:MSIL/FileCryptor.PA!MTB?

Ransom:MSIL/FileCryptor.PA!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment