About “Ransom:MSIL/Flyterper.A” infection

The Ransom:MSIL/Flyterper.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom:MSIL/Flyterper.A virus can do?

How to determine Ransom:MSIL/Flyterper.A?


File Info:
crc32: CCC5BF80
md5: 515f33b9ffaa199e27d134554882be1f
name: 515F33B9FFAA199E27D134554882BE1F.mlw
sha1: 0cf9334cfb6515cc41036f03a639ec314e893b2f
sha256: aab20c9f50aad448ad4fb12893a5531265e609ece3636b2313421b3615c23a71
sha512: 3d3a8d9c63793c1c17865ea7156c063da33b6d553a7d35a46369c3e6a322ff668f7c8815dca982840ba78959fdfbe64f3f913edb80d87615ae6f68f7240cf7ac
ssdeep: 3072:di11M+lmsolAIrRuw+mqv9j1MWLQkDLsY+KpQDfwYXj3fxQUSJVQ4+H+OcH7A+w:dh+lDAA1LjLpQDfFj6Vi+OCVyf
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2017
Assembly Version: 2.0.0.0
InternalName: i-am-a-dolphin.exe
FileVersion: 2.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: i-am-a-dolphin
ProductVersion: 2.0.0.0
FileDescription: i-am-a-dolphin
OriginalFilename: i-am-a-dolphin.exe

Ransom:MSIL/Flyterper.A also known as:

K7AntiVirus	Trojan ( 004cd9e31 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.10598
Cynet	Malicious (score: 85)
Cylance	Unsafe
Zillya	Trojan.Filecoder.Win32.5156
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:MSIL/Flyterper.9d3b4214
K7GW	Trojan ( 004cd9e31 )
Cybereason	malicious.9ffaa1
Symantec	Ransom.HiddenTear!g1
ESET-NOD32	a variant of MSIL/Filecoder.Z
APEX	Malicious
Avast	MSIL:Filecoder-AC [Trj]
ClamAV	Win.Ransomware.Hiddentear-9752356-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Heur.Ransom.HiddenTears.1
NANO-Antivirus	Trojan.Win32.Encoder.ephdos
SUPERAntiSpyware	Ransom.HiddenTear/Variant
MicroWorld-eScan	Gen:Heur.Ransom.HiddenTears.1
Tencent	Win32.Trojan.Generic.Stat
Ad-Aware	Gen:Heur.Ransom.HiddenTears.1
Sophos	Mal/Generic-R + Troj/Cryptear-A
Comodo	Malware@#34j6yaf8801ez
F-Secure	Heuristic.HEUR/AGEN.1129970
BitDefenderTheta	Gen:NN.ZemsilF.34628.qm0@aSGjpze
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_CRYPTEAR.SM0
McAfee-GW-Edition	Ransomware-FTD!515F33B9FFAA
FireEye	Generic.mg.515f33b9ffaa199e
Emsisoft	Gen:Heur.Ransom.HiddenTears.1 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.bapvr
Avira	HEUR/AGEN.1129970
eGambit	Unsafe.AI_Score_99%
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Ransom:MSIL/Flyterper.A
Arcabit	Trojan.Ransom.HiddenTears.1
AegisLab	Trojan.Win32.Generic.4!c
GData	MSIL.Trojan-Ransom.Cryptear.Z
AhnLab-V3	Trojan/Win32.FileCoder.C3465186
McAfee	Ransomware-FTD!515F33B9FFAA
MAX	malware (ai score=100)
Malwarebytes	Ransom.HiddenTear
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom_CRYPTEAR.SM0
Rising	Ransom.Flyterper!8.DA7D (CLOUD)
Yandex	Trojan.Agent!vX7D/VQy3S8
Ikarus	Trojan-Ransom.FileCrypter
Fortinet	MSIL/Filecoder.AK!tr.ransom
AVG	MSIL:Filecoder-AC [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Filecoder.HwMA67AA

How to remove Ransom:MSIL/Flyterper.A?

Ransom:MSIL/Flyterper.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X