Malware

MSIL/Filecoder.AGP removal guide

Malware Removal

The MSIL/Filecoder.AGP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Filecoder.AGP virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine MSIL/Filecoder.AGP?


File Info:

crc32: 45EB696A
md5: 9afb84acc1cbecc4d70e30ebbc9bb9ae
name: 9AFB84ACC1CBECC4D70E30EBBC9BB9AE.mlw
sha1: ac1b10dbd2f237475510d0d86c78bcc983a5559b
sha256: d970639946fd688735a558bea81262e1763fed2697238ff166b5592c85b088e8
sha512: efe625fdd2d8a4ab20246f7e3ae2899a74f47afddada4e25412feb5f040de5b8a1dde91992c1848ec6319a4d1753b6131d8e84557030f090bce95ad22cfb242e
ssdeep: 1536:vdypNpJyCNalo0AiWxVj9qYlE6Ym1Ovy6aeYyacbmFW:vgpNpcyZNj9HO6AK6apTcbmFW
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2020
Assembly Version: 1.0.0.0
InternalName: UnlockYourFiles.exe
FileVersion: 1.0.0.0
ProductName: Unlock Your Files
ProductVersion: 1.0.0.0
FileDescription: Unlock Your Files
OriginalFilename: UnlockYourFiles.exe

MSIL/Filecoder.AGP also known as:

K7AntiVirusTrojan ( 0057a1b31 )
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop16.46389
CynetMalicious (score: 99)
ALYacTrojan.Ransom.Filecoder
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:MSIL/Cryptolocker.de880daf
K7GWTrojan ( 0057a1b31 )
Cybereasonmalicious.bd2f23
CyrenW32/Trojan.LQRF-7458
ESET-NOD32a variant of MSIL/Filecoder.AGP
APEXMalicious
KasperskyHEUR:Trojan-Ransom.MSIL.Crypmodng.gen
BitDefenderTrojan.RanSerKD.36829006
ViRobotTrojan.Win32.Z.Agent.112768.G
MicroWorld-eScanTrojan.RanSerKD.36829006
Ad-AwareTrojan.RanSerKD.36829006
SophosMal/Generic-S
ComodoMalware@#g2m0ngx79d9n
BitDefenderThetaGen:NN.ZemsilF.34688.gm1@ainrpHn
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionRDN/Ransom
FireEyeGeneric.mg.9afb84acc1cbecc4
EmsisoftTrojan.RanSerKD.36829006 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Agent.vwmeo
eGambitUnsafe.AI_Score_82%
GridinsoftRansom.Win32.Gen.oa!s1
ArcabitTrojan.RanSerKD.D231F74E
AegisLabTrojan.Win32.Malicious.4!c
GDataMSIL.Trojan.BSE.1P39KVM
AhnLab-V3Trojan/Win.Generic.C4448872
McAfeeRDN/Ransom
MAXmalware (ai score=100)
VBA32TScope.Trojan.MSIL
MalwarebytesRansom.FileCryptor
PandaTrj/GdSda.A
RisingRansom.Genasom!8.293 (CLOUD)
IkarusTrojan.SuspectCRC
MaxSecureTrojan.Malware.74744022.susgen
FortinetMSIL/Generic.AP.A9C450A!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove MSIL/Filecoder.AGP?

MSIL/Filecoder.AGP removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment