Worm:Win32/Morto.B

What is Worm:Win32/Morto.B infection?

In this post you will certainly locate regarding the meaning of Worm:Win32/Morto.B and also its adverse effect on your computer. Such ransomware are a form of malware that is specified by on-line fraudulences to demand paying the ransom by a target.

In the majority of the instances, Worm:Win32/Morto.B virus will certainly instruct its targets to start funds move for the objective of neutralizing the amendments that the Trojan infection has actually presented to the target’s gadget.

Worm:Win32/Morto.B Summary

These alterations can be as adheres to:

  • Executable code extraction;
  • Attempts to connect to a dead IP:Port (1 unique times);
  • Performs some HTTP requests;
  • Ciphering the documents located on the victim’s hard drive — so the sufferer can no more utilize the data;
  • Preventing routine accessibility to the victim’s workstation;

Worm:Win32/Morto.B

The most normal channels whereby Worm:Win32/Morto.B are infused are:

  • By ways of phishing e-mails;
  • As an effect of customer winding up on a resource that hosts a malicious software application;

As soon as the Trojan is effectively infused, it will either cipher the information on the sufferer’s PC or protect against the device from working in an appropriate fashion – while also putting a ransom note that discusses the need for the victims to impact the settlement for the objective of decrypting the records or restoring the data system back to the preliminary condition. In the majority of instances, the ransom money note will show up when the client restarts the COMPUTER after the system has actually already been damaged.

Worm:Win32/Morto.B circulation networks.

In numerous edges of the world, Worm:Win32/Morto.B grows by leaps as well as bounds. However, the ransom money notes and techniques of obtaining the ransom quantity might vary depending upon particular neighborhood (local) setups. The ransom money notes and also methods of obtaining the ransom amount might vary depending on particular neighborhood (local) settings.

Ransomware injection

For instance:

    Faulty signals concerning unlicensed software.

    In specific locations, the Trojans often wrongfully report having actually discovered some unlicensed applications allowed on the victim’s device. The sharp after that demands the customer to pay the ransom money.

    Faulty declarations about unlawful content.

    In countries where software piracy is much less popular, this technique is not as reliable for the cyber fraudulences. Alternatively, the Worm:Win32/Morto.B popup alert might wrongly claim to be deriving from a police institution and also will report having located child pornography or various other illegal data on the gadget.

    Worm:Win32/Morto.B popup alert may falsely claim to be obtaining from a legislation enforcement establishment and also will report having located youngster porn or various other unlawful information on the tool. The alert will in a similar way contain a requirement for the customer to pay the ransom.

Technical details

File Info:

crc32: C70DB5E1md5: 44a9da51081b6215583d266589915eb9name: 44A9DA51081B6215583D266589915EB9.mlwsha1: d6a80107040bd361290bb8f8298ee3fef7c76f45sha256: ad2a6464e2505a6464aa809075a28da69cda9ed3ab866f4049561cc9272adfafsha512: 76653d3122cce059eeb940a4d64979ab3c6934b0e216853c7e174f363d93929ad9c1e959fa4b75fe78c18d41f6cc705daed8dbac69e9bb16d7270d0fde774861ssdeep: 768:tj6m7eCLZ4G2x0J3yAnDRhczVcDSAL39d:tjD7eCLZZp3yobAVcD139dtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Worm:Win32/Morto.B also known as:

GridinSoft Trojan.Ransom.Gen
Cynet Malicious (score: 99)
ALYac Gen:Variant.Ransom.Converton.8
Cylance Unsafe
Sangfor Trojan.Win32.Save.a
Alibaba Worm:Win32/Morto.db887673
Cybereason malicious.1081b6
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/Morto.I
APEX Malicious
Avast Win32:Malware-gen
ClamAV Win.Worm.Morto-274
Kaspersky Net-Worm.Win32.Morto.s
BitDefender Gen:Variant.Ransom.Converton.8
NANO-Antivirus Virus.Win32.Gen.ccmw
ViRobot Worm.Win32.A.Net-Morto.26624.A
MicroWorld-eScan Gen:Variant.Ransom.Converton.8
Tencent Win32.Worm-net.Morto.Pdcr
Ad-Aware Gen:Variant.Ransom.Converton.8
Sophos Mal/Morto-A
Comodo Worm.Win32.Morto.~B@4kbfnn
BitDefenderTheta Gen:NN.ZexaF.34758.bmW@auBkXNj
VIPRE Trojan.Win32.Generic!BT
TrendMicro Mal_Morto2
McAfee-GW-Edition Artemis!Trojan
FireEye Gen:Variant.Ransom.Converton.8
Emsisoft Gen:Variant.Ransom.Converton.8 (B)
SentinelOne Static AI – Suspicious PE
Jiangmin Worm/Morto.ch
Webroot W32.Rogue.Gen
Avira HEUR/AGEN.1100283
eGambit Unsafe.AI_Score_99%
Antiy-AVL Trojan/Generic.ASMalwS.3F7983
Kingsoft Win32.Troj.Generic_a.c.(kcloud)
Microsoft Worm:Win32/Morto.B
AegisLab Worm.Win32.Morto.p!c
GData Gen:Variant.Ransom.Converton.8
TACHYON Worm/W32.Small.26624.K
AhnLab-V3 Backdoor/Win32.Morto.R12082
McAfee Artemis!44A9DA51081B
MAX malware (ai score=100)
VBA32 TScope.Malware-Cryptor.SB
Panda Generic Malware
TrendMicro-HouseCall Mal_Morto2
Rising [email protected] (RDML:4e2N84vmbA86wIU0LatTqA)
Yandex Worm.Morto!F5bfwiPTRY4
Ikarus Net-Worm.Win32.Morto
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/MORTO.A!worm
AVG Win32:Malware-gen
Paloalto generic.ml

How to remove Worm:Win32/Morto.B ransomware?

Unwanted application has ofter come with other viruses and spyware. This threats can steal account credentials, or crypt your documents for ransom.
Reasons why I would recommend GridinSoft1

Run the setup file.

Run Setup.exe
GridinSoft Anti-Malware Setup

Press “Install” button.

GridinSoft Anti-Malware Install

Once installed, Anti-Malware will automatically run.

GridinSoft Anti-Malware Splash-Screen

Wait for the Anti-Malware scan to complete.

GridinSoft Anti-Malware Scanning

Click on “Clean Now”.

GridinSoft Anti-Malware Scan Result

Are Your Protected?

Full version of GridinSoft

If the guide doesn’t help you to remove Worm:Win32/Morto.B you can always ask me in the comments for getting help.

References

    About the author

    Robert Bailey

    Security engineer focused on malware behavior, removal workflows, and Windows hardening. Robert reviews threat articles for practical accuracy, checking detection names, symptoms, and cleanup steps before publication.

    Leave a Comment