Categories: Ransom

What is “Ransom:Win32/Dereilock.A”?

The Ransom:Win32/Dereilock.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom:Win32/Dereilock.A virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Ransom:Win32/Dereilock.A?


File Info:
crc32: 86403694md5: 93dd4fa22e6cf3f1e21ce69a4f3049bename: 93DD4FA22E6CF3F1E21CE69A4F3049BE.mlwsha1: 0ec02afb61ff281aa9373f937aad439af78377c3sha256: a293bcccc00c2c8db5fd24b08e5133c650a432e5d741a58383f87356ceca052dsha512: 03ab073348901be9be4b7d6c0e4c8a3d1d4377f5b186323f5c08ea491a5cfb8ca5c913fbd9006b70758eb0a641eb58a0f764fb4ce57038a6efe6dea9df7839f2ssdeep: 6144:qrFSB/roeWlrjMSxkl3r8IO+7M/gr3z96VWHI7Xw7z+K/NRh4hSx:qrFI/PWJ/wJwgr3z9qX7XwPJ/Lvtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: Copyright xa9  2016Assembly Version: 1.0.0.0InternalName: LOGON.exeFileVersion: 1.0.0.0ProductName: LOGONProductVersion: 1.0.0.0FileDescription: LOGONOriginalFilename: LOGON.exe

Ransom:Win32/Dereilock.A also known as:

K7AntiVirus	Trojan ( 00500fdf1 )
DrWeb	Trojan.Encoder.7461
Cynet	Malicious (score: 99)
ALYac	Trojan.Ransom.DeriaLock
Cylance	Unsafe
Alibaba	Ransom:Win32/Dereilock.24e9a0ca
K7GW	Trojan ( 00500fdf1 )
Cybereason	malicious.22e6cf
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Filecoder.DP
APEX	Malicious
Avast	MSIL:Ransom-T [Trj]
Kaspersky	Trojan-Ransom.Win32.Gen.bas
BitDefender	Trojan.Ransom.BHH
NANO-Antivirus	Trojan.Win32.FileCoder.ekfbvs
MicroWorld-eScan	Trojan.Ransom.BHH
Tencent	Win32.Trojan.Ransom.Hupp
Ad-Aware	Trojan.Ransom.BHH
Sophos	Mal/Generic-R + Mal/StupCryp-A
Comodo	Malware@#ug4s4ahzwtny
BitDefenderTheta	Gen:NN.ZemsilF.34692.Cq0@aCowd4o
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_DERIALOCK.B
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.93dd4fa22e6cf3f1
Emsisoft	Trojan.Ransom.BHH (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Gen.ce
Webroot	W32.Trojan.Ransom
Avira	TR/FileCoder.phzmc
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	Trojan/Generic.ASMalwS.1DA2243
Kingsoft	Win32.Troj.Ransom.v.(kcloud)
Microsoft	Ransom:Win32/Dereilock.A
AegisLab	Trojan.Win32.Generic.j!c
GData	Trojan.Ransom.BHH
TACHYON	Ransom/W32.DN-DeriaLock.468992
AhnLab-V3	Trojan/Win32.Ransom.C1724822
McAfee	Artemis!93DD4FA22E6C
MAX	malware (ai score=100)
VBA32	Hoax.Gen
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_DERIALOCK.B
Rising	Ransom.Gen!8.DE83 (CLOUD)
Yandex	Trojan.Filecoder!2kHZqRhhnXc
Ikarus	Trojan.MSIL.FakeTool
Fortinet	MSIL/Filecoder.DP!tr.ransom
AVG	MSIL:Ransom-T [Trj]
Paloalto	generic.ml