Categories: Ransom

Should I remove “Ransom:Win32/RagnarLocker.B”?

The Ransom:Win32/RagnarLocker.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom:Win32/RagnarLocker.B virus can do?

A process attempted to delay the analysis task.
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Uses Windows utilities for basic functionality
Attempts to delete volume shadow copies
Attempts to stop active services
Modifies boot configuration settings
Installs itself for autorun at Windows startup
Writes a potential ransom message to disk
Creates a hidden or system file
Collects information to fingerprint the system
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Ransom:Win32/RagnarLocker.B?


File Info:
crc32: 358051A4md5: 1195d0d18be9362fb8dd9e1738404c9dname: upload_filesha1: ef02cc3dbdff915c9149aef86911b4e780b89ae6sha256: dd79b2abc21e766fe3076038482ded43e5069a1af9e0ad29e06dce387bfae900sha512: c2fb489e32e8cb975c8672092bb1e7c1789241f931023adbe6097c7b3b083ed9bc37879f123627ae4c53a756cc5436daa4a1cebba33e8e3404fa8164dba5262fssdeep: 768:nzFqkXykrENxqgGZlIz2y+Vn/PUXmOSDAhOhC:nJqH7UgGZls3llSDstype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Ransom:Win32/RagnarLocker.B also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.727130
FireEye	Generic.mg.1195d0d18be9362f
CAT-QuickHeal	Ransom.Ragnarlocker
Qihoo-360	Generic/HEUR/QVM19.1.356B.Malware.Gen
McAfee	GenericRXKJ-MB!1195D0D18BE9
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 0056475b1 )
BitDefender	Gen:Variant.Razy.727130
K7GW	Trojan ( 0056475b1 )
Cybereason	malicious.18be93
TrendMicro	Ransom.Win32.RAGNAR.YPAI-B
Symantec	Downloader
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Exploit.CVE_2017_0213-6306933-0
Kaspersky	Trojan-Ransom.Win32.Cryptor.dra
Alibaba	Ransom:Win32/RagnarLocker.43e8d1d2
NANO-Antivirus	Trojan.Win32.Cryptor.hykkdo
ViRobot	Trojan.Win32.Z.Razy.55808.BG
AegisLab	Trojan.Win32.Cryptor.j!c
Ad-Aware	Gen:Variant.Razy.727130
Emsisoft	Gen:Variant.Razy.727130 (B)
Comodo	Malware@#tuily15scd68
F-Secure	Trojan.TR/Ransom.RagnarLocker.zieds
DrWeb	Trojan.Encoder.32719
Invincea	Mal/Generic-R + Troj/Lothlock-A
McAfee-GW-Edition	BehavesLike.Win32.RansomGandcrab.qh
Sophos	Troj/Lothlock-A
SentinelOne	DFI – Malicious PE
Webroot	W32.Trojan.Gen
Avira	TR/Ransom.RagnarLocker.zieds
Microsoft	Ransom:Win32/RagnarLocker.B
Arcabit	Trojan.Razy.DB185A
ZoneAlarm	Trojan-Ransom.Win32.Cryptor.dra
GData	Gen:Variant.Razy.727130
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Ransom.C4183924
VBA32	BScope.Trojan.DelShad
ALYac	Trojan.Ransom.RagnarLocker
MAX	malware (ai score=86)
Malwarebytes	Ransom.Ragnar
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Filecoder.RagnarLocker.A
TrendMicro-HouseCall	Ransom.Win32.RAGNAR.YPAI-B
Rising	Ransom.Ragnar!1.CAE5 (CLASSIC)
Ikarus	Trojan-Ransom.Ragnarlocker
eGambit	Unsafe.AI_Score_74%
Fortinet	W32/Filecoder_RagnarLocker.A!tr.ransom
BitDefenderTheta	AI:Packer.2224713E1F
AVG	Win32:Trojan-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)