What is “Ransom:Win32/Filecoder.F!MTB”?

The Ransom:Win32/Filecoder.F!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom:Win32/Filecoder.F!MTB virus can do?

Anomalous binary characteristics

How to determine Ransom:Win32/Filecoder.F!MTB?


File Info:
crc32: 106735D4
md5: 92da7d57b58a3359e99d3b94035950c0
name: 92DA7D57B58A3359E99D3B94035950C0.mlw
sha1: 201a31fb9674411dbe055d702a7cda682d6d6b0e
sha256: 439971f9bafeb271dfab9bc47c18e903e30ae73f33fcb5da70795ee8ae099fac
sha512: 05f6368ba125980605301221712ab73658ea542e71f4b02ce71061195b82c548c78ebbede253e337758c01aec8c90995fe9d92faecace8c0b02629488040ea92
ssdeep: 768:pONQ/bj6HV/2oyDWHJs5HAmKxMxGcGcmBj4s2SUd596KFcywJ:pONQTj6HB2IGZKxIJGcmBsLZ5FU
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Ransom:Win32/Filecoder.F!MTB also known as:

ALYac	Generic.Ransom.Small.7AEE7CC6
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
BitDefender	Generic.Ransom.Small.7AEE7CC6
Cybereason	malicious.7b58a3
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Cynet	Malicious (score: 100)
MicroWorld-eScan	Generic.Ransom.Small.7AEE7CC6
Ad-Aware	Generic.Ransom.Small.7AEE7CC6
FireEye	Generic.Ransom.Small.7AEE7CC6
Emsisoft	Generic.Ransom.Small.7AEE7CC6 (B)
SentinelOne	Static AI – Suspicious PE
Microsoft	Ransom:Win32/Filecoder.F!MTB
Arcabit	Generic.Ransom.Small.7AEE7CC6
GData	Generic.Ransom.Small.7AEE7CC6
MAX	malware (ai score=89)
MaxSecure	Trojan.Malware.300983.susgen

How to remove Ransom:Win32/Filecoder.F!MTB?

Ransom:Win32/Filecoder.F!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X