Categories: Malware

Win32/KillMBR.NCO removal instruction

The Win32/KillMBR.NCO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/KillMBR.NCO virus can do?

Uses Windows utilities for basic functionality
Likely installs a bootkit via raw harddisk modifications
Attempts to restart the guest VM
Writes a potential ransom message to disk
Anomalous binary characteristics

How to determine Win32/KillMBR.NCO?


File Info:
crc32: F63C43D9md5: fab05c128b683d1e2d4ef981b4f1905aname: FAB05C128B683D1E2D4EF981B4F1905A.mlwsha1: 9374501e77dc72c515d6a5c8f4ffe5656c70d896sha256: a0ed70e10cde5f96cd36166a235c3ca13007181d83636a971e992467c9cfc272sha512: 75addc6745c27d2c494e1de22082257c7f725dcd668243e5bcf1a652d1e1cb1c7ce09db385eb71b9b6e58feeaa7d15b6454b19ef2b478a72ad73113d8174afb7ssdeep: 1536:wNx32nZ7n9Ji4+IrLFAAi524020CVdDATOwt77X0goavwiw:w/2nR9Ji4+IrLW240FCVBATEgoavQtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/KillMBR.NCO also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 0052b6931 )
Elastic	malicious (high confidence)
DrWeb	Trojan.MBRlock.281
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.30462464
Cylance	Unsafe
Zillya	Trojan.Carbanak.Win32.7
Sangfor	Trojan.Win32.Atosev.rfn
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	TrojanSpy:Win32/KillMBR.8f9c0d08
K7GW	Trojan ( 0052b6931 )
Cybereason	malicious.28b683
Cyren	W32/Carbanak.TVJG-0788
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/KillMBR.NCO
Zoner	Trojan.Win32.66962
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
ClamAV	Win.Ransomware.UselessDisk-6492359-0
Kaspersky	HEUR:Trojan-Spy.Win32.Carbanak.gen
BitDefender	Trojan.GenericKD.30462464
NANO-Antivirus	Trojan.Win32.Carbanak.ezedbo
MicroWorld-eScan	Trojan.GenericKD.30462464
Tencent	Malware.Win32.Gencirc.11492840
Ad-Aware	Trojan.GenericKD.30462464
Sophos	Mal/Generic-S
Comodo	Malware@#1abdtv71ryukq
BitDefenderTheta	Gen:NN.ZexaF.34670.luX@aO9tpwk
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_MBRLOCKER.SMALY
McAfee-GW-Edition	Ransom-KillMBR!FAB05C128B68
FireEye	Trojan.GenericKD.30462464
Emsisoft	Trojan.GenericKD.30462464 (B)
Jiangmin	TrojanSpy.Carbanak.a
Avira	TR/KillMBR.wsjln
Antiy-AVL	Trojan[Spy]/Win32.Carbanak
Microsoft	Ransom:Win32/Pitroxin.A
Arcabit	Trojan.Generic.D1D0D200
AegisLab	Trojan.Win32.Carbanak.tpmX
GData	Trojan.GenericKD.30462464
AhnLab-V3	Trojan/Win32.RL_DiskWriter.R355055
McAfee	Ransom-KillMBR!FAB05C128B68
MAX	malware (ai score=83)
VBA32	BScope.TrojanSpy.Carbanak
Malwarebytes	Ransom.Petya
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_MBRLOCKER.SMALY
Rising	Ransom.Pitroxin!1.B225 (CLOUD)
Yandex	Trojan.GenAsa!4sneWOrtzb8
Ikarus	Trojan.Win32.KillMBR
Fortinet	W32/KillMBR.NCO!tr
AVG	Win32:TrojanX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.KillMBR.HwIApQsA