Ransom:Win64/FonixCrypt.AC!MTB removal

The Ransom:Win64/FonixCrypt.AC!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom:Win64/FonixCrypt.AC!MTB virus can do?

The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

How to determine Ransom:Win64/FonixCrypt.AC!MTB?


File Info:
crc32: 887990F2
md5: 45bd8c50b18ea46215b084bd4b909232
name: 45BD8C50B18EA46215B084BD4B909232.mlw
sha1: 24f3a8c071c436017baee73e9ce7770f7a8c0111
sha256: 1b30e0509075234edd5f46ed054ad56bb6cf8d234341e0c72fe27407027e94de
sha512: 5bb54c2fec193a8085fb1f6f4f946d49acf0a6533916951dac1503fc5023d0701fc15010444e6eec7168ec11f8dd3929385f7efcfd7601bb94c8cb2fcd0e4e9e
ssdeep: 6144:0pC0yCr2a6sjZxzP2OzusUD+8g861P2GKDcvIKgg8h8u+hyF8MALZS0iUUJJPA+:09QIZxD21s8+8g7HwKyWuCLMZUUJtzO
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
0: [No Data]

Ransom:Win64/FonixCrypt.AC!MTB also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	DeepScan:Generic.Ransom.Fonix.2.4644150A
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.0b18ea
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/Filecoder.Hansom
APEX	Malicious
Avast	FileRepMalware
Kaspersky	UDS:Trojan.Win32.Fsysna
BitDefender	DeepScan:Generic.Ransom.Fonix.2.4644150A
MicroWorld-eScan	DeepScan:Generic.Ransom.Fonix.2.4644150A
Ad-Aware	DeepScan:Generic.Ransom.Fonix.2.4644150A
Sophos	Generic ML PUA (PUA)
F-Secure	Heuristic.HEUR/AGEN.1138704
McAfee-GW-Edition	BehavesLike.Win64.Dropper.fc
FireEye	Generic.mg.45bd8c50b18ea462
Emsisoft	DeepScan:Generic.Ransom.Fonix.2.4644150A (B)
Avira	HEUR/AGEN.1138704
Microsoft	Ransom:Win64/FonixCrypt.AC!MTB
Arcabit	DeepScan:Generic.Ransom.Fonix.2.4644150A
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	DeepScan:Generic.Ransom.Fonix.2.4644150A
AhnLab-V3	Trojan/Win.Crypt.C4465848
McAfee	Artemis!45BD8C50B18E
MAX	malware (ai score=85)
Rising	Trojan.Filecoder!8.68 (TFE:dGZlOgV9uvQFJ/TO3w)
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Ransom:Win64/FonixCrypt.AC!MTB?

Ransom:Win64/FonixCrypt.AC!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X