Ransom:Win32/FonixCrypter.PB!MTB removal instruction

The Ransom:Win32/FonixCrypter.PB!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom:Win32/FonixCrypter.PB!MTB virus can do?

How to determine Ransom:Win32/FonixCrypter.PB!MTB?


File Info:
crc32: F39442DB
md5: 781613b7534e6fbcc6a734c926b0a9f8
name: 781613B7534E6FBCC6A734C926B0A9F8.mlw
sha1: 9e870f8156fd00818c860864df74b9564f51ec34
sha256: 3f9cc81138df226a04ea4fb9f8201ed5e61ab1342686ba4ccbf78826682f4bfa
sha512: 1d404250bccc3c226f22a7caeaf534656b06dbae485a6cc343a7d3f7a579127cf71a1766b99cd43c81fafa489b3c440783aa756c1c5e4f50e79d36469bb46a72
ssdeep: 24576:R0BnNRJApAtvRrlQL4ktTkaN1TnSCc6wuzF4Afx8Jt:RYRJApAxR5Qckto6nS/6wkF4Afx8Jt
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
0: [No Data]

Ransom:Win32/FonixCrypter.PB!MTB also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	DeepScan:Generic.Ransom.Fonix.2.509FA102
ALYac	Trojan.Ransom.Filecoder
Malwarebytes	Ransom.Fonix
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Filecoder.4!c
Sangfor	Trojan.Win32.Pynamer.B
K7AntiVirus	Trojan ( 0056a7d81 )
BitDefender	DeepScan:Generic.Ransom.Fonix.2.509FA102
K7GW	Trojan ( 0056a7d81 )
Cybereason	malicious.7534e6
Arcabit	DeepScan:Generic.Ransom.Fonix.2.509FA102
Cyren	W64/Trojan.XLKP-6080
Symantec	Ransom.Fonix!gen1
ESET-NOD32	a variant of Win64/Filecoder.FONIX.A
APEX	Malicious
Alibaba	Trojan:Win64/Pynamer.a16c5b10
NANO-Antivirus	Trojan.Win64.Encoder.hqrkzs
Rising	Ransom.Fonix!1.CA6D (CLASSIC)
Ad-Aware	DeepScan:Generic.Ransom.Fonix.2.509FA102
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1129606
DrWeb	Trojan.Encoder.32244
Zillya	Trojan.Filecoder.Win64.9125
McAfee-GW-Edition	BehavesLike.Win64.Generic.th
FireEye	Generic.mg.781613b7534e6fbc
Emsisoft	DeepScan:Generic.Ransom.Fonix.2.509FA102 (B)
MaxSecure	Trojan.Malware.12142419.susgen
Avira	HEUR/AGEN.1129606
Antiy-AVL	Trojan/Win64.Filecoder
Microsoft	Ransom:Win32/FonixCrypter.PB!MTB
ViRobot	Trojan.Win64.S.Ransom.1320448
AhnLab-V3	Malware/Win64.RL_Generic.R367050
GData	Win64.Trojan-Ransom.Fonix.B
Cynet	Malicious (score: 100)
McAfee	Artemis!781613B7534E
MAX	malware (ai score=100)
VBA32	Trojan.Encoder
Cylance	Unsafe
Panda	Trj/CI.A
Yandex	Trojan.Filecoder!ul32MRazDjc
Ikarus	Trojan-Ransom.FileCrypter
Fortinet	W64/Encoder.A9F8!tr.ransom
Webroot	W32.Ransom.Gen
AVG	Win64:RansomX-gen [Ransom]
Avast	Win64:RansomX-gen [Ransom]
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win64/Ransom.Generic.HgEASOYA

How to remove Ransom:Win32/FonixCrypter.PB!MTB?

Ransom:Win32/FonixCrypter.PB!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X