Ransom

How to remove “Ransom:Win32/FileCryptor!MTB”?

Malware Removal

The Ransom:Win32/FileCryptor!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom:Win32/FileCryptor!MTB virus can do?

    How to determine Ransom:Win32/FileCryptor!MTB?

    
    

    File Info:

    crc32: 4488D517
    md5: f3076add8669d1c33cd78b6879e694de
    name: F3076ADD8669D1C33CD78B6879E694DE.mlw
    sha1: c3fa78167859ba6c6b39695df0500ebbb6a77881
    sha256: 5bae961fec67565fb88c8bcd3841b7090566d8fc12ccb70436b5269456e55c00
    sha512: de42399a159bb791482198486634ca90813b92665117eaaceba589ee8a98a50099630f7683655bc50718dac9a8e0d00559aeac68884b8689ff5ebe8ca14119a1
    ssdeep: 24576:6KZwH4EN6MAhEluJAKDoKKqZhF45iAARBTdFZgXHuiI2wt1QXFf0ZtKZhagPg:rI6MqJ3DoKKqZhF45iAITdFZ3iqcfyK
    type: PE32 executable (console) Intel 80386, for MS Windows

    Version Info:

    0: [No Data]

    Ransom:Win32/FileCryptor!MTB also known as:

    BkavW32.AIDetectVM.malware2
    MicroWorld-eScanTrojan.GenericKD.35120626
    CAT-QuickHealTrojan.Agent
    Qihoo-360Win32/Trojan.Ransom.b44
    McAfeeRansom-P2Key!F3076ADD8669
    CylanceUnsafe
    AegisLabTrojan.Win32.Generic.j!c
    SangforMalware
    CrowdStrikewin/malicious_confidence_100% (W)
    BitDefenderTrojan.GenericKD.35120626
    K7GWRiskware ( 0040eff71 )
    K7AntiVirusRiskware ( 0040eff71 )
    ArcabitTrojan.Generic.D217E5F2
    CyrenW32/Trojan.OBOG-5582
    SymantecRansom.Cryptolocker
    AvastWin32:Malware-gen
    KasperskyHEUR:Trojan-Ransom.Win32.Generic
    AlibabaRansom:Win32/FileCryptor.2e4ed253
    NANO-AntivirusTrojan.Win32.Encoder.icekpy
    ViRobotTrojan.Win32.S.Pay2Key.1027072
    RisingTrojan.Generic@ML.89 (RDMK:TFUJBLY5CDtWaBpafKZGFg)
    Ad-AwareTrojan.GenericKD.35120626
    SophosMal/Generic-R + Troj/Ransom-GCV
    ComodoMalware@#2viiukn4yioi9
    F-SecureTrojan.TR/FileCryptor.gufqt
    DrWebTrojan.Encoder.33028
    ZillyaTrojan.Agent.Win32.1538397
    TrendMicroRansom.Win32.PAY2KEY.A
    McAfee-GW-EditionRansom-pay2key.a
    FireEyeTrojan.GenericKD.35120626
    EmsisoftTrojan.GenericKD.35120626 (B)
    IkarusTrojan-Ransom.FileCryptor
    JiangminTrojan.Agent.czfx
    WebrootW32.Ransom.Gen
    AviraTR/FileCryptor.gufqt
    MAXmalware (ai score=100)
    Antiy-AVLTrojan/Win32.Generic
    KingsoftWin32.Troj.Undef.(kcloud)
    MicrosoftRansom:Win32/FileCryptor!MTB
    ZoneAlarmHEUR:Trojan-Ransom.Win32.Generic
    GDataTrojan.GenericKD.35120626
    CynetMalicious (score: 85)
    AhnLab-V3Trojan/Win32.Ransom.C4222771
    ALYacTrojan.Ransom.Pay2Key
    VBA32TrojanRansom.Agent
    MalwarebytesRansom.Pay2Key
    ESET-NOD32a variant of Win32/Filecoder.OEU
    TrendMicro-HouseCallRansom.Win32.PAY2KEY.A
    TencentWin32.Trojan.Generic.Dzjb
    FortinetW32/Ransom.GCV!tr
    AVGWin32:Malware-gen
    Paloaltogeneric.ml
    MaxSecureTrojan.Malware.10307848.susgen

    How to remove Ransom:Win32/FileCryptor!MTB?

    Ransom:Win32/FileCryptor!MTB removal tool
    • Download and install GridinSoft Anti-Malware.
    • Open GridinSoft Anti-Malware and perform a “Standard scan“.
    • Move to quarantine” all items.
    • Open “Tools” tab – Press “Reset Browser Settings“.
    • Select proper browser and options – Click “Reset”.
    • Restart your computer.

    About the author

    Paul Valéry

    I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

    Leave a Comment