Categories: Malware

Win32/Filecoder.RanzyLocker.A malicious file

The Win32/Filecoder.RanzyLocker.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Filecoder.RanzyLocker.A virus can do?

A process attempted to delay the analysis task.
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
A process created a hidden window
Uses Windows utilities for basic functionality
Attempts to delete volume shadow copies
Modifies boot configuration settings
Clears Windows events or logs
Uses suspicious command line tools or Windows utilities

How to determine Win32/Filecoder.RanzyLocker.A?


File Info:
crc32: DBC45838md5: fb1cb205656a373e1f5e25840fe23c4dname: FB1CB205656A373E1F5E25840FE23C4D.mlwsha1: 38b86dacb1568af968365663c548bd9556fe0849sha256: 90691a36d1556ba7a77d0216f730d6cd9a9063e71626489094313c0afe85a939sha512: 69bd10e17230c20d372885111dfb9c66cf007c1c40c4cabe2f07011e4cfe9574206fd415c28dd8fd9c385ce11ae7563acb56b86fb50b493ab9597a3e45ecd4cessdeep: 3072:WNnBEPCZ788hExMfHg/50iIETyyCDRk8gE9QIluYEh0VZvcWreFJY:WPEa586nHg/50/ET3CoE7uYEaMtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Filecoder.RanzyLocker.A also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.Ransom.Imps.1
CAT-QuickHeal	Trojan.Delshad
Qihoo-360	Win32/Trojan.cc9
McAfee	GenericRXLW-UE!FB1CB205656A
Cylance	Unsafe
Zillya	Trojan.Filecoder.Win32.16457
AegisLab	Trojan.Win32.DelShad.4!c
Sangfor	Malware
K7AntiVirus	Trojan ( 005700951 )
BitDefender	Gen:Heur.Ransom.Imps.1
K7GW	Trojan ( 005700951 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Ransom.Imps.1
TrendMicro	Ransom.Win32.THUNDERX.SMTH
BitDefenderTheta	Gen:NN.ZexaF.34634.iqW@aSoNd8ci
Cyren	W32/Filecoder.AJ.gen!Eldorado
Symantec	Downloader
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Ransom.Win32.Generic
Alibaba	Ransom:Win32/FileCrypter.fe7c633a
NANO-Antivirus	Trojan.Win32.DelShad.hzjric
Avast	Win32:RansomX-gen [Ransom]
Tencent	Malware.Win32.Gencirc.11b01d8b
Ad-Aware	Gen:Heur.Ransom.Imps.1
Emsisoft	Trojan.FileCoder (A)
Comodo	Malware@#3e8qhyii86j1x
F-Secure	Trojan.TR/AD.RansomHeur.dtpfe
DrWeb	Trojan.Encoder.32806
Invincea	Mal/Generic-S
McAfee-GW-Edition	GenericRXLW-UE!FB1CB205656A
FireEye	Generic.mg.fb1cb205656a373e
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.DelShad.agq
Webroot	W32.Ransom.Gen
Avira	TR/AD.RansomHeur.dtpfe
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.DelShad
Kingsoft	Win32.Troj.Undef.(kcloud)
Gridinsoft	Ransom.Win32.Ransom.oa
Microsoft	Ransom:Win32/FileCrypter.MB!MTB
ViRobot	Trojan.Win32.Z.Delshad.141312.B
ZoneAlarm	HEUR:Trojan-Ransom.Win32.Generic
GData	Gen:Heur.Ransom.Imps.1
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Ransomlock.R353561
VBA32	BScope.Trojan.DelShad
ALYac	Trojan.Ransom.Ranzy
Malwarebytes	Ransom.Ranzy
ESET-NOD32	a variant of Win32/Filecoder.RanzyLocker.A
TrendMicro-HouseCall	Ransom.Win32.THUNDERX.SMTH
Rising	Ransom.FileCrypter!8.11F42 (TFE:5:QDsKbiaRKNJ)
Yandex	Trojan.DelShad!AnMrPmbmG2g
Ikarus	Trojan-Ransom.Ranzylocker
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Filecoder.ODD!tr.ransom
AVG	Win32:RansomX-gen [Ransom]
Cybereason	malicious.5656a3
Panda	Trj/GdSda.A
MaxSecure	Trojan.Malware.74279478.susgen