MSIL/Filecoder.AESLocker.A removal guide

The MSIL/Filecoder.AESLocker.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Filecoder.AESLocker.A virus can do?

Anomalous binary characteristics
Unusual version info supplied for binary

How to determine MSIL/Filecoder.AESLocker.A?


File Info:
crc32: B7E266EB
md5: fb7a78dba1ca8c899e19efc90c498971
name: FB7A78DBA1CA8C899E19EFC90C498971.mlw
sha1: 15380aeb2f838c865791ab9016995dd5e8a32fc6
sha256: 3d89542ccf4d242327bb31daf40a1c89a0fd8fb25e4b763250cced6afd7f6bf3
sha512: 95055393eb263b9db83c48222e25466c39771b5e1dd0e9486dd72bc9a8da87a0484d37d08b2e7ced7b5a37d6f864885d39bea496e9bd94f01bb5e5d7e05dfc8d
ssdeep: 384:h0g9IdVmOtKbiGALIiB95wEBVsDwDmH7cIyro6OWidfrSY8bkzYcERG8PZ:hz9OVOALl3QH5VXJpqwYcER5
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
Assembly Version: 10.0.10586.164
InternalName: Windows Store Download.exe
FileVersion: 10.0.10586.164
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Key Management Service Provider
ProductVersion: 10.0.10586.164
FileDescription: Key Management Service Provider
OriginalFilename: Windows Store Download.exe

MSIL/Filecoder.AESLocker.A also known as:

Cylance	Unsafe
Sangfor	Trojan.MSIL.AESLocker.A
Cybereason	malicious.ba1ca8
ESET-NOD32	a variant of MSIL/Filecoder.AESLocker.A
APEX	Malicious
Avast	Win32:Trojan-gen
BitDefender	Gen:Heur.Ransom.HiddenTears.1
MicroWorld-eScan	Gen:Heur.Ransom.HiddenTears.1
Ad-Aware	Gen:Heur.Ransom.HiddenTears.1
BitDefenderTheta	Gen:NN.ZemsilF.34608.bm0@aq99WPm
FireEye	Gen:Heur.Ransom.HiddenTears.1
Emsisoft	Gen:Heur.Ransom.HiddenTears.1 (B)
SentinelOne	Static AI – Malicious PE
Arcabit	Trojan.Ransom.HiddenTears.1
GData	Gen:Heur.Ransom.HiddenTears.1
MAX	malware (ai score=88)
Rising	Ransom.FileCryptor!8.1A7 (CLOUD)
AVG	Win32:Trojan-gen

How to remove MSIL/Filecoder.AESLocker.A?

MSIL/Filecoder.AESLocker.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X