Ransom

What is “Ransom:Win64/MountLocker.BM!MSR”?

Malware Removal

The Ransom:Win64/MountLocker.BM!MSR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom:Win64/MountLocker.BM!MSR virus can do?

  • Anomalous binary characteristics

How to determine Ransom:Win64/MountLocker.BM!MSR?


File Info:

crc32: BAD975A4
md5: b63a8bfdf7df9f9dd8c3bedb99b6f8ff
name: B63A8BFDF7DF9F9DD8C3BEDB99B6F8FF.mlw
sha1: 9e61b0960ac40452067720e8839b71ef10c05949
sha256: 0aa8099c5a65062ba4baec8274e1a0650ff36e757a91312e1755fded50a79d47
sha512: 8a1ae8c6fde917e6a53f33a13cef8065a90a6b31a84f4b8effbd1527ad1769d4712e37e31e65594aaea35d4bad80a0c0499404e8267c305500f8ed4ce5fa304b
ssdeep: 1536:zumzFe61Icro3yJn2ds+Gwpin2MR1n7H7ur/5WgS09clN1dtVl1dFt9lN1dtV9l:zuP6ucrWSn2ds+Gwpin2mMr/UH0S
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:

0: [No Data]

Ransom:Win64/MountLocker.BM!MSR also known as:

K7AntiVirusTrojan ( 00571b391 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.32749
CynetMalicious (score: 100)
ALYacTrojan.Ransom.MountLocker
CylanceUnsafe
ZillyaTrojan.Filecoder.Win64.9310
SangforRansom.Win64.MountLocker.BM
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Zudochka.0c3af4f7
K7GWTrojan ( 00571b391 )
Cybereasonmalicious.df7df9
CyrenW64/Ransom.VEVH-8444
SymantecDownloader
ESET-NOD32a variant of Win64/Filecoder.CI
APEXMalicious
AvastWin64:Malware-gen
ClamAVWin.Ransomware.MountLocker-9802291-0
KasperskyTrojan.Win32.Zudochka.ewf
BitDefenderGen:Variant.Razy.811029
NANO-AntivirusTrojan.Win64.Zudochka.ififsy
ViRobotTrojan.Win64.S.Ransom.96768
MicroWorld-eScanGen:Variant.Razy.811029
TencentWin32.Trojan.Zudochka.Pdvu
Ad-AwareGen:Variant.Razy.811029
SophosMal/Generic-S
ComodoMalware@#zthd9hbhdvq6
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom.Win64.MOUNTLOCKER.C
McAfee-GW-EditionBehavesLike.Win64.Upatre.nt
FireEyeGeneric.mg.b63a8bfdf7df9f9d
EmsisoftGen:Variant.Razy.811029 (B)
JiangminTrojan.Zudochka.jb
WebrootW32.Ransom.Gen
AviraTR/AD.RansomHeur.qzoyj
MicrosoftRansom:Win64/MountLocker.BM!MSR
ArcabitTrojan.Razy.DC6015
AegisLabTrojan.Win32.Zudochka.4!c
GDataGen:Variant.Razy.811029
TACHYONRansom/W64.MountLocker.96768
AhnLab-V3Malware/Win64.Generic.C4233254
McAfeeRansomware-HBP!B63A8BFDF7DF
MAXmalware (ai score=100)
VBA32Trojan.Zudochka
PandaTrj/CI.A
TrendMicro-HouseCallRansom.Win64.MOUNTLOCKER.C
RisingTrojan.Filecoder!8.68 (CLOUD)
YandexTrojan.Zudochka!m+10/8w//uU
IkarusTrojan-Ransom.FileCrypter
MaxSecureTrojan.Malware.109086806.susgen
FortinetW64/Filecoder.B1A4!tr.ransom
AVGWin64:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win64/Ransom.Zudochka.HgEASQ8A

How to remove Ransom:Win64/MountLocker.BM!MSR?

Ransom:Win64/MountLocker.BM!MSR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment