Ransom:MSIL/Thanos.DC!MTB malicious file

The Ransom:MSIL/Thanos.DC!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom:MSIL/Thanos.DC!MTB virus can do?

How to determine Ransom:MSIL/Thanos.DC!MTB?


File Info:
crc32: 2EA528FC
md5: 016781b5991f23d1a17227487dad0ed0
name: 016781B5991F23D1A17227487DAD0ED0.mlw
sha1: a2951f24ef5e67855ae92b1b0a29719a6730e580
sha256: 113230f881d7008fad3d62e34ce79f1b9273f604303f1b5c1450cff6481655de
sha512: 21ff7dc7c2cc84b21051b1dfb55dad33a2dda92f90e55e277c8b4e19c7f82e6b767b906f93e1a058f2ce3156d99d8c20cb902f2209bcf45a14d579973155be9a
ssdeep: 1536:vCzYhcCuXHIHo7642KETKtpEB6ZdJeaSazH/9pk0iUjrBbKgjdilfIF:vCMcx3IHo+45amd0aR9pk0iUjFbwfIF
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: Kingdee.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: Kingdee.exe

Ransom:MSIL/Thanos.DC!MTB also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.EncoderNET.31368
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (D)
Cybereason	malicious.4ef5e6
Cyren	W32/MSIL_Thanos.A.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Filecoder.Thanos.A
APEX	Malicious
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZemsilF.34670.fm0@aitV3Pg
TrendMicro	Ransom.MSIL.THANOS.SM
McAfee-GW-Edition	Ransom-Thanos!016781B5991F
FireEye	Generic.mg.016781b5991f23d1
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1141108
eGambit	Unsafe.AI_Score_85%
Microsoft	Ransom:MSIL/Thanos.DC!MTB
AhnLab-V3	Malware/Gen.RL_Reputation.C4301278
McAfee	Ransom-Thanos!016781B5991F
TrendMicro-HouseCall	Ransom.MSIL.THANOS.SM
Fortinet	MSIL/Thanos.A!tr.ransom
Qihoo-360	Win32/Heur.Generic.HwMAY2cA

How to remove Ransom:MSIL/Thanos.DC!MTB?

Ransom:MSIL/Thanos.DC!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X