What is "Ransom:Win32/Fortrypt.A"?

The Ransom:Win32/Fortrypt.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom:Win32/Fortrypt.A virus can do?

A process created a hidden window
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Attempts to delete volume shadow copies
Mimics the file times of a Windows system file
Exhibits possible ransomware file modification behavior
Network activity detected but not expressed in API logs
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Ransom:Win32/Fortrypt.A?


File Info:
crc32: DD9712E9
md5: 10bfaf9b3f86fe38fa5f765bd4ce2304
name: 10BFAF9B3F86FE38FA5F765BD4CE2304.mlw
sha1: fc60e1bd6b070004aee4f6b051b4b5292831f75d
sha256: a29a2421d44ef129662088925f5bf48b4718826a91ef869da86b2b0963d1f062
sha512: 53b86548ce9dad0b1eef5fe37f233ded1f2bbc5caf46b45471266305a287372fcaacc92cd3a565b9c744c059e0507625e312600715889cc3dc18bebb9514a7c5
ssdeep: 384:+EFgjG+FhyjpFhlWuM6P3dVzBgO39jC3drSKbV14V+sMMdJSRqU8ZTpOWXV3qhUh:9Ft+qHzmQs94V+3qU8ZVpXxjUOHnQ+yo
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Ransom:Win32/Fortrypt.A also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	DeepScan:Generic.Ransom.Small.128157E2
FireEye	Generic.mg.10bfaf9b3f86fe38
McAfee	Ransom-FRQ!10BFAF9B3F86
Cylance	Unsafe
Zillya	Trojan.Scatter.Win32.103
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 003f437b1 )
BitDefender	DeepScan:Generic.Ransom.Small.128157E2
K7GW	Trojan ( 003f437b1 )
Cybereason	malicious.b3f86f
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Scatter.pw
Alibaba	Ransom:Win32/generic.ali2000010
NANO-Antivirus	Trojan.Win32.Gpcode.ejzcjm
AegisLab	Trojan.Win32.Scatter.j!c
Rising	Ransom.Fortrypt!8.1BC9 (CLOUD)
Ad-Aware	DeepScan:Generic.Ransom.Small.128157E2
Emsisoft	DeepScan:Generic.Ransom.Small.128157E2 (B)
Comodo	Malware@#2w7e535efgr9p
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.Encoder.145
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_FORTRYPT.F117A9
McAfee-GW-Edition	Ransom-FRQ!10BFAF9B3F86
Sophos	ML/PE-A + Troj/FortKrpt-A
Ikarus	Trojan.Win32.Gpcode
Jiangmin	Trojan.Scatter.dh
Avira	TR/Dropper.Gen
MAX	malware (ai score=80)
Antiy-AVL	Trojan/Win32.SGeneric
Microsoft	Ransom:Win32/Fortrypt.A
Arcabit	DeepScan:Generic.Ransom.Small.128157E2
ZoneAlarm	Trojan-Ransom.Win32.Scatter.pw
GData	DeepScan:Generic.Ransom.Small.128157E2
Cynet	Malicious (score: 100)
Acronis	suspicious
BitDefenderTheta	AI:Packer.AB2D4CD41E
ALYac	DeepScan:Generic.Ransom.Small.128157E2
VBA32	BScope.TrojanRansom.Gpcode
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Gpcode.NAI
TrendMicro-HouseCall	Ransom_FORTRYPT.F117A9
Tencent	Win32.Trojan.Scatter.Dxdn
Yandex	Trojan.Scatter!YehlZvSmDyI
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_76%
Fortinet	W32/Gpcode.NAI!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (D)
Qihoo-360	Win32/TrojanDownloader.Small.HgIASOYA

How to remove Ransom:Win32/Fortrypt.A?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Ransom:Win32/Fortrypt.A”?