Should I remove “Ransom:Win32/NetWalker.S!MTB”?

Malware Removal

The Ransom:Win32/NetWalker.S!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Ransom:Win32/NetWalker.S!MTB virus can do?

  • Attempts to delete volume shadow copies
  • Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Ransom:Win32/NetWalker.S!MTB?


File Info:

crc32: CCFF57CF
md5: f0cc568491cd523d2677d938f163395f
name: bg.exe
sha1: ca05a4cde0ba40983381b2f91c9ecee672c69262
sha256: f2215e1a848bc5a5d172745201ea428b1d16fee7c814c5c5180a94a134592e86
sha512: acaa24ed418feb3dbfedae933859f43adfbb2442fd1fb46baadc5235006ee4c0a1b9ed1b4a1e2514ea7fc43d7fac0b768776e43d1452d4a47fd968c0aa0c46ba
ssdeep: 1536:juCWRxL7hbUiQfovecnXUU+hhOZuIWiFp+ZfaBZebC33O+SSVsXb:KCWf7VJQfmeMXvkhOZu1iFBBZebC35s
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Ransom:Win32/NetWalker.S!MTB also known as:

BkavW32.AIDetectVM.malware2
MicroWorld-eScanGen:Variant.Ransom.Netwalker.1
Qihoo-360Generic/HEUR/QVM20.1.600B.Malware.Gen
McAfeeGenericRXKD-DA!F0CC568491CD
MalwarebytesRansom.NetWalker
CrowdStrikewin/malicious_confidence_80% (D)
BitDefenderGen:Variant.Ransom.Netwalker.1
K7GWTrojan ( 005637c21 )
K7AntiVirusTrojan ( 005637c21 )
TrendMicroRansom.Win32.NETWALKER.SMTH
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.NetWalker.D
APEXMalicious
KasperskyTrojan.Win32.DelShad.czb
AlibabaTrojan:Win32/NetWalker.a950d7be
NANO-AntivirusVirus.Win32.Gen.ccmw
TencentWin32.Trojan.Raas.Auto
Ad-AwareGen:Variant.Ransom.Netwalker.1
EmsisoftGen:Variant.Ransom.Netwalker.1 (B)
F-SecureHeuristic.HEUR/AGEN.1115135
DrWebTrojan.Encoder.31452
ZillyaTrojan.DelShad.Win32.468
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Trojan.kh
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.f0cc568491cd523d
SophosMal/Ransom-FW
SentinelOneDFI – Suspicious PE
WebrootW32.Malware.gen
AviraHEUR/AGEN.1115135
FortinetW32/NetWalker.B!tr.ransom
Antiy-AVLTrojan/Win32.DelShad
Endgamemalicious (high confidence)
ArcabitTrojan.Ransom.Netwalker.1
ZoneAlarmTrojan.Win32.DelShad.czb
MicrosoftRansom:Win32/NetWalker.S!MTB
AhnLab-V3Trojan/Win32.RansomCrypt.C4029970
Acronissuspicious
BitDefenderThetaAI:Packer.8A3994151E
ALYacGen:Variant.Ransom.Netwalker.1
MAXmalware (ai score=89)
VBA32BScope.TrojanPSW.Spy
CylanceUnsafe
TrendMicro-HouseCallRansom.Win32.NETWALKER.SMTH
RisingWorm.WBNA!8.321 (RDMK:cmRtazrHsCaBHo5Bo10VxI50yOfU)
YandexTrojan.Filecoder!w6c4UtZR3jE
IkarusTrojan-Ransom.NetWalker
GDataGen:Variant.Ransom.Netwalker.1
AVGWin32:Trojan-gen
Cybereasonmalicious.491cd5
AvastWin32:Trojan-gen

How to remove Ransom:Win32/NetWalker.S!MTB?

Ransom:Win32/NetWalker.S!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment