Ransom

Should I remove “Ransom:Win64/Filecoder.MR!MTB”?

Malware Removal

The Ransom:Win64/Filecoder.MR!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom:Win64/Filecoder.MR!MTB virus can do?

  • Unconventionial language used in binary resources: Spanish (Modern)

How to determine Ransom:Win64/Filecoder.MR!MTB?


File Info:

crc32: 5CFDEF83
md5: 48888b38fcd2e62897b73cb0c530dfe8
name: 48888B38FCD2E62897B73CB0C530DFE8.mlw
sha1: 737ecde97eea26ad943eebaead83cc0d0dbae0ab
sha256: 881e22e5edee6732171de878b1ac89107fec3433e7b8b2de8b5ddc37bd9a6208
sha512: 627d7d31082813f5d7b99288eadd5624afe9002c3af667d05fb5bd8e79f835f4aef9bc9bd169d4347773f5e282325d589e2aab64a611bd00c3aaaf046e445c85
ssdeep: 12288:HXr3MRPWeWYgeWYg955/155/hdHRNvnzOZeFtiuhLM9/oIaoh:3L2PWpdxNfzOwFtPLM9/9Zh
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:

0: [No Data]

Ransom:Win64/Filecoder.MR!MTB also known as:

K7AntiVirusTrojan ( 0056c3651 )
LionicTrojan.Win32.Rents.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
CAT-QuickHealTrojan.EncoderRI.S16230555
ALYacTrojan.Ransom.Filecoder
CylanceUnsafe
ZillyaTrojan.Filecoder.Win64.9376
AlibabaTrojan:Win64/Filecoder.f3fef2e0
K7GWTrojan ( 0056c3651 )
Cybereasonmalicious.8fcd2e
CyrenW64/Trojan.CGIX-4173
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win64/Filecoder.CB
AvastWin64:RansomX-gen [Ransom]
ClamAVWin.Ransomware.Solaso-9822491-0
KasperskyHEUR:Trojan-Ransom.Win32.Encoder.vho
BitDefenderGen:Heur.Ransom.REntS.Gen.1
NANO-AntivirusTrojan.Win64.Encoder.ihrzpx
MicroWorld-eScanGen:Heur.Ransom.REntS.Gen.1
TencentTrojan.Win32.Encoder.za
Ad-AwareGen:Heur.Ransom.REntS.Gen.1
SophosTroj/Ransom-GEF
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom.Win64.SOLASOCRYPT.SMCT
FireEyeGen:Heur.Ransom.REntS.Gen.1
EmsisoftGen:Heur.Ransom.REntS.Gen.1 (B)
JiangminTrojan.Encoder.acq
AviraTR/FileCoder.fmbdw
eGambitUnsafe.AI_Score_98%
Antiy-AVLTrojan/Generic.ASMalwS.3117AA8
MicrosoftRansom:Win64/Filecoder.MR!MTB
ArcabitTrojan.Ransom.REntS.Gen.1
GDataGen:Heur.Ransom.REntS.Gen.1
AhnLab-V3Malware/Win64.RL_Generic.R362347
McAfeeRansom-Solaso!48888B38FCD2
MAXmalware (ai score=94)
MalwarebytesRansom.FileCryptor
PandaTrj/CI.A
TrendMicro-HouseCallRansom.Win64.SOLASOCRYPT.SMCT
IkarusTrojan-Ransom.Encrp
MaxSecureTrojan.Malware.74641327.susgen
FortinetPossibleThreat.ARN.H
AVGWin64:RansomX-gen [Ransom]
Paloaltogeneric.ml
Qihoo-360Win64/Ransom.Filecoder.HgEASPQA

How to remove Ransom:Win64/Filecoder.MR!MTB?

Ransom:Win64/Filecoder.MR!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment