How to remove “Ransom:Win32/CONTI.DC!MTB”?

Malware Removal

The Ransom:Win32/CONTI.DC!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Ransom:Win32/CONTI.DC!MTB virus can do?

  • A process attempted to delay the analysis task.
  • Attempts to connect to a dead IP:Port (255 unique times)
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Attempts to delete volume shadow copies
  • Exhibits possible ransomware file modification behavior

How to determine Ransom:Win32/CONTI.DC!MTB?


File Info:

crc32: B8CCB01F
md5: b3d6ba0aa663f699283d25ddcb6561b9
name: B3D6BA0AA663F699283D25DDCB6561B9.mlw
sha1: a1f27e6be62bf0af7d5bff447156b3413f0d97c8
sha256: d3c75c5bc4ae087d547bd722bd84478ee6baf8c3355b930f26cc19777cd39d4c
sha512: 6d3b5f75169243f44247bb6ad32d6f68d937240e0d1711373012d696729a3e44ad21336e96a5548e11605412365ad4f53d2f5c798e74f204be2c16df5ae610ef
ssdeep: 3072:Ho152dUa/IbraA9bq0rcUs8v341LVNwNBm9IaBbOwzXEttqwm:Hy2dUDL9bqI7QSmdetPm
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Ransom:Win32/CONTI.DC!MTB also known as:

BkavW32.AIDetectVM.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.44996423
CAT-QuickHealRansom.Conti
McAfeeRDN/Ransom
MalwarebytesRansom.Conti
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Generic.4!c
SangforMalware
K7AntiVirusTrojan ( 00574dfe1 )
BitDefenderTrojan.GenericKD.44996423
K7GWTrojan ( 00574dfe1 )
Cybereasonmalicious.aa663f
ArcabitTrojan.Generic.D2AE9747
CyrenW32/Trojan.YRAO-0040
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Filecoder.Conti.K
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan-Ransom.Win32.Cryptor.gen
AlibabaRansom:Win32/CONTI.87f9a3f6
TencentWin32.Trojan.Filecoder.Pgmo
Ad-AwareTrojan.GenericKD.44996423
SophosMal/Generic-S
ComodoMalware@#2z4apfycj94kd
DrWebTrojan.Encoder.33315
ZillyaTrojan.Filecoder.Win32.17190
TrendMicroRansom_CONTI.R002C0DLH20
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.b3d6ba0aa663f699
EmsisoftTrojan.FileCoder (A)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Generic.dzzcl
MAXmalware (ai score=100)
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftRansom:Win32/CONTI.DC!MTB
ViRobotTrojan.Win32.Z.Conti.212992
ZoneAlarmHEUR:Trojan-Ransom.Win32.Cryptor.gen
GDataTrojan.GenericKD.44996423
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.Generic.C4075041
ALYacTrojan.Ransom.Conti
VBA32BScope.TrojanRansom.Cryptor
CylanceUnsafe
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_CONTI.R002C0DLH20
RisingRansom.Conti!8.11736 (TFE:5:e9qNinkCZmK)
YandexTrojan.Filecoder!pgXovGHiYM8
IkarusTrojan-Ransom.Conti
eGambitUnsafe.AI_Score_99%
FortinetW32/Conti.F!tr.ransom
BitDefenderThetaGen:NN.ZexaF.34700.nuX@aao@Acai
AVGWin32:Trojan-gen
AvastWin32:Trojan-gen
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Trojan.Ransom.793

How to remove Ransom:Win32/CONTI.DC!MTB?

Ransom:Win32/CONTI.DC!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment