MSIL/Filecoder.AGN removal tips

The MSIL/Filecoder.AGN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Filecoder.AGN virus can do?

The binary likely contains encrypted or compressed data.

How to determine MSIL/Filecoder.AGN?


File Info:
crc32: FEF57915
md5: 0284153bf855b7a0b061af6a17ac03ae
name: 0284153BF855B7A0B061AF6A17AC03AE.mlw
sha1: ed0b8245c5e4a0bfcc6c32a52703b76e88c4dfdb
sha256: 1ea870f07a4a0ad6eb379b5c5d95728928e80d108799def789410fefadd6c576
sha512: 9757ab616b1986cb1ffe08ea3b8061fec921b45744fa2a79c947affa31143702037f82efabc1b8d6165e3fff11c0015fc8d97ca1bb41da61713ddc5a1cc5bb74
ssdeep: 6144:wJOjfzzrvWHwAl/JKXwdDg8s2YLTqnI2vu:wSffrvYX/Qw1G2YLTqhu
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: 
Assembly Version: 0.0.0.0
InternalName: bethanyHSmega.exe
FileVersion: 2.0.7.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 2.0.7.0
FileDescription: bethanyHSmega
OriginalFilename: bethanyHSmega.exe

MSIL/Filecoder.AGN also known as:

Elastic	malicious (high confidence)
McAfee	RDN/Ransom
Malwarebytes	Generic.Malware/Suspicious
AegisLab	Trojan.Win32.Malicious.4!c
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
BitDefender	Trojan.GenericKD.36473578
K7GW	Trojan ( 00578fb81 )
K7AntiVirus	Trojan ( 00578fb81 )
Arcabit	Trojan.Generic.D22C8AEA
ESET-NOD32	a variant of MSIL/Filecoder.AGN
APEX	Malicious
Cynet	Malicious (score: 85)
Alibaba	Trojan:MSIL/Filecoder.f9ce5730
MicroWorld-eScan	Trojan.GenericKD.36473578
Ad-Aware	Trojan.GenericKD.36473578
Emsisoft	Trojan.GenericKD.36473578 (B)
F-Secure	Trojan.TR/Ransom.vzblr
McAfee-GW-Edition	RDN/Ransom
FireEye	Trojan.GenericKD.36473578
Sophos	Generic PUA ON (PUA)
SentinelOne	Static AI – Malicious PE
Avira	TR/Ransom.vzblr
MAX	malware (ai score=85)
Microsoft	Ransom:MacOS/Filecoder
GData	Trojan.GenericKD.36473578
ALYac	Trojan.GenericKD.36473578
Cylance	Unsafe
Ikarus	Trojan-Ransom.FileCrypter
Fortinet	MSIL/Filecoder.AGN!tr
BitDefenderTheta	Gen:NN.ZemsilF.34608.qm0@aaQkT1
AVG	Win32:TrojanX-gen [Trj]
Avast	Win32:TrojanX-gen [Trj]
Qihoo-360	Win32/Ransom.Generic.HgIASQkA

How to remove MSIL/Filecoder.AGN?

MSIL/Filecoder.AGN removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X