How to remove “MSIL/Filecoder.AEF”?

The MSIL/Filecoder.AEF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Filecoder.AEF virus can do?

Anomalous binary characteristics

How to determine MSIL/Filecoder.AEF?


File Info:
crc32: 19161018
md5: 5d4294a5df03da8ccc2efb75a51d7391
name: 5D4294A5DF03DA8CCC2EFB75A51D7391.mlw
sha1: c4e9afebce23a98c65e1d449e4892ef5f126faf6
sha256: 4472cdb43ad79303998e530ef5219c5dbda6006d842ba1608caefc2668ffa94c
sha512: ad6f157f95dba391fcafbc80257cb98c7f59b69d9ba9ca588804dbe73959950bf5919c9c0591709c264d7559251aec66f304e34ff2caa04d0a958bf6299e4f73
ssdeep: 384:TKr3l3chuRM9ulYjVynirYBslVALgJqXkNkJq3VOVbkXRIeVXwK:TKrV3quRM9ulY5ynirYBslVALgJqXkN
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2020
Assembly Version: 1.0.0.0
InternalName: DISK_ENCODER.exe
FileVersion: 1.0.0.0
ProductName: disk_encoder
ProductVersion: 1.0.0.0
FileDescription: disk_encoder
OriginalFilename: DISK_ENCODER.exe

MSIL/Filecoder.AEF also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.EncoderNET.HiddenTear.1
McAfee	RDN/Ransom
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:MSIL/Filecoder.53a58a72
K7GW	Trojan ( 0057469a1 )
Cybereason	malicious.5df03d
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Filecoder.AEF
APEX	Malicious
Avast	Win32:RansomX-gen [Ransom]
Kaspersky	HEUR:Trojan-Ransom.MSIL.Gen.gen
BitDefender	Gen:Variant.Bulz.253859
MicroWorld-eScan	Gen:Variant.Bulz.253859
Ad-Aware	Gen:Variant.Bulz.253859
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.5d4294a5df03da8c
Emsisoft	Gen:Variant.Bulz.253859 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Program:Win32/Wacapew.C!ml
GData	Gen:Variant.Bulz.253859
AhnLab-V3	Malware/Win32.RL_Generic.C4263477
MAX	malware (ai score=89)
Rising	Ransom.Gen!8.DE83 (CLOUD)
Ikarus	Trojan-Ransom.FileCrypter
Fortinet	MSIL/Filecoder.106C!tr.ransom
AVG	Win32:RansomX-gen [Ransom]

How to remove MSIL/Filecoder.AEF?

MSIL/Filecoder.AEF removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X