What is “MSIL/Filecoder.AKR”?

The MSIL/Filecoder.AKR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Filecoder.AKR virus can do?

Network activity detected but not expressed in API logs

How to determine MSIL/Filecoder.AKR?


File Info:
crc32: 37259F45
md5: e4f82eab5c9fbb0bf187163dc3173f08
name: E4F82EAB5C9FBB0BF187163DC3173F08.mlw
sha1: df76711b66b4553d677bf859ae08fb7a37b070c5
sha256: b0fcdf7e22d353c16f3ec6aa031e408dd800bb1f55ec1db6527d0131a0544921
sha512: 779761f24556c6954ea1adee5b5165cfd133baffed3c855cad5de2e150ae0d20c8819102460e840a4a1f44d8ebc969a26b02ff34adceab6852c6ef00a87cec27
ssdeep: 12288:pyrDObBe6NNNp9V7amIM+a1YggF7/tUTTMmqpUN7hkNDfJKntxOmtmXYgcv0emH:pyvM/3p9V
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: KRSWL0cker.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: KRSWL0cker
ProductVersion: 1.0.0.0
FileDescription: KRSWL0cker
OriginalFilename: KRSWL0cker.exe

MSIL/Filecoder.AKR also known as:

Elastic	malicious (high confidence)
ALYac	Generic.Ransom.WCryG.1606E3E1
Cylance	Unsafe
Sangfor	Trojan.Win32.Generic.ky
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:MSIL/Filecoder.97beecc5
K7GW	Trojan ( 005814c31 )
K7AntiVirus	Trojan ( 005814c31 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	MSIL/Filecoder.AKR
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Generic.Ransom.WCryG.1606E3E1
MicroWorld-eScan	Generic.Ransom.WCryG.1606E3E1
Tencent	Win32.Trojan.Generic.Amma
Ad-Aware	Generic.Ransom.WCryG.1606E3E1
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34110.Fm0@aWa4vaj
TrendMicro	TROJ_GEN.R002C0WHN21
McAfee-GW-Edition	RDN/Generic BackDoor
FireEye	Generic.mg.e4f82eab5c9fbb0b
Emsisoft	Generic.Ransom.WCryG.1606E3E1 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Ransom.xiiay
Antiy-AVL	Trojan/Generic.ASMalwS.347A0BF
Microsoft	Backdoor:Win32/Bladabindi!ml
GData	Generic.Ransom.WCryG.1606E3E1
McAfee	RDN/Generic BackDoor
MAX	malware (ai score=87)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Ransom.FileCryptor
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0WHN21
Yandex	Trojan.Agent!t075FuGg+CQ
Ikarus	Trojan-Ransom.FileCrypter
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove MSIL/Filecoder.AKR?

MSIL/Filecoder.AKR removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X