About “Ransom:Win64/Ryuk” infection

The Ransom:Win64/Ryuk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom:Win64/Ryuk virus can do?

How to determine Ransom:Win64/Ryuk?


File Info:
crc32: 4D832FCC
md5: a3514a411e04a3279a9a6ce3670b744a
name: A3514A411E04A3279A9A6CE3670B744A.mlw
sha1: f27e316f3e1e07a60c8df909eb2edcbb0ab29494
sha256: 95b228b664dca2e18935444c67c7c7dbda9da7450a18d429cb04f7e311af5fe9
sha512: 224857d5597ea20d364038ee18cd47db0930646832812b6bbb9d8e504bae9fec4c4b0b055d5334a93d8157df6481749e69ca6f1efd2412d7b0e2140921429510
ssdeep: 1536:8VtHj/5XKXwteL+2ekxU/RjuHmI87pbTJ0BSjapNtsTLmgd0esWWWEd7B9dloY1:8H4ekxU/RjuroJ0BVtsTaUYRVCYCCM
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
0: [No Data]

Ransom:Win64/Ryuk also known as:

K7AntiVirus	Trojan ( 00553fc91 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Trojan.Ransom.Ryuk
Cylance	Unsafe
Zillya	Trojan.Generic.Win32.262118
Sangfor	Win.Ransomware.Ryuk-6688842-0
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win64/Filecoder.19ed4bd3
K7GW	Trojan ( 00553fc91 )
Cybereason	malicious.11e04a
Cyren	W64/Ransom.Ryuk.A.gen!Eldorado
Symantec	Ransom.Hermes!gen2
ESET-NOD32	a variant of Win64/Filecoder.T
APEX	Malicious
Avast	Win64:RansomX-gen [Ransom]
ClamAV	Win.Ransomware.Ryuk-6688842-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Generic.Ransom.Ryuk3.581D78DC
MicroWorld-eScan	Generic.Ransom.Ryuk3.581D78DC
Tencent	Win32.Trojan.Generic.Lkmz
Ad-Aware	Generic.Ransom.Ryuk3.581D78DC
Sophos	Mal/Generic-R + Troj/Ransom-FAF
Comodo	Malware@#35twqqrrrybt1
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom.Win64.RYUK.AA
McAfee-GW-Edition	BehavesLike.Win64.Generic.ch
FireEye	Generic.mg.a3514a411e04a327
Emsisoft	Generic.Ransom.Ryuk3.581D78DC (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Generic.cubrg
Avira	HEUR/AGEN.1110011
Microsoft	Ransom:Win64/Ryuk
GData	Generic.Ransom.Ryuk3.581D78DC
TACHYON	Ransom/W64.Ryuk.152576
AhnLab-V3	Malware/Win64.Ransom.C2766591
McAfee	Ransom-Ryuk!A3514A411E04
MAX	malware (ai score=100)
VBA32	TrojanRansom.Win64.Ryuk
Malwarebytes	Trojan.MalPack
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom.Win64.RYUK.AA
Rising	Ransom.Jabaxsta!8.100EB (CLOUD)
Ikarus	Trojan-Ransom.FileCrypter
Fortinet	W32/Ryuk.A!tr.ransom
AVG	Win64:RansomX-gen [Ransom]
Paloalto	generic.ml

How to remove Ransom:Win64/Ryuk?

Ransom:Win64/Ryuk removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X