Ransom

Ransom:Win32/Dircrypt.B removal tips

Malware Removal

The Ransom:Win32/Dircrypt.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom:Win32/Dircrypt.B virus can do?

  • The binary likely contains encrypted or compressed data.
  • Installs itself for autorun at Windows startup

How to determine Ransom:Win32/Dircrypt.B?


File Info:

crc32: C6D2DF7B
md5: 927c5cf68a6825737ff62d94d6fdb1ce
name: 927C5CF68A6825737FF62D94D6FDB1CE.mlw
sha1: 211ea5c4023e2c459741cca3497413cc8b550206
sha256: fa907500c8ebbb4c162693c12902bdfb12d4cb9c9cfbb0fa59313ef6f2255eeb
sha512: 39d609e4283b4e0bab3bc4b8970c709f2d4a6026f5e3fa71e7a4aef03712b7baf139db4f6124d2e1c51ddb99d4f6175d5a00a9955ecc1675c553478fda2173d2
ssdeep: 768:qZ1GHJpspFti0d2UKrmqJPTJQQj+B57D:qZFTiaKdHj
type: MS-DOS executable, MZ for MS-DOS

Version Info:

0: [No Data]

Ransom:Win32/Dircrypt.B also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0044516f1 )
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Gamania.41640
CynetMalicious (score: 100)
ALYacGenPack:Trojan.Ransom.ABZ
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/Dircrypt.0eb7ff06
K7GWTrojan ( 0044516f1 )
Cybereasonmalicious.68a682
CyrenW32/Ransom.BYBY-7057
SymantecTrojan.Ransomlock
ESET-NOD32a variant of Win32/Filecoder.BH
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Ransom.Win32.Swed.a
BitDefenderGenPack:Trojan.Ransom.ABZ
NANO-AntivirusTrojan.Win32.Swed.idkhal
MicroWorld-eScanGenPack:Trojan.Ransom.ABZ
TencentWin32.Trojan.Swed.Hryq
Ad-AwareGenPack:Trojan.Ransom.ABZ
SophosMal/Generic-S
ComodoMalware@#g1kw326n52pu
BitDefenderThetaGen:NN.ZexaF.34686.bmqaaSNvXKf
VIPRETrojan.Win32.Ransom.aan (v)
McAfee-GW-EditionBehavesLike.Win32.Generic.mc
FireEyeGeneric.mg.927c5cf68a682573
EmsisoftGenPack:Trojan.Ransom.ABZ (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Agent.hjbm
AviraTR/Crypt.ZPACK.Gen
MicrosoftRansom:Win32/Dircrypt.B
AegisLabTrojan.Win32.GenericCryptor.m5oU
GDataGenPack:Trojan.Ransom.ABZ
Acronissuspicious
McAfeeArtemis!927C5CF68A68
MAXmalware (ai score=100)
VBA32Trojan.Agent
PandaTrj/CI.A
RisingRansom.Swed!8.2FA9 (CLOUD)
IkarusTrojan-Ransom.FileCrypter
FortinetW32/Swed.A!tr.ransom
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Ransom:Win32/Dircrypt.B?

Ransom:Win32/Dircrypt.B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment