Categories: Malware

MSIL/Filecoder.Atom removal

The MSIL/Filecoder.Atom is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Filecoder.Atom virus can do?

Reads data out of its own binary image
Drops a binary and executes it
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs

How to determine MSIL/Filecoder.Atom?


File Info:
crc32: 6FCA7051md5: 24cfdd82c3ee00aff3408ecf3541ee07name: 24CFDD82C3EE00AFF3408ECF3541EE07.mlwsha1: 168e4afa61ce1d1b1114ce1bba90c6478d6134dfsha256: fb94ca4dee7bf8a99b67f6abb5f8b887821f5ddf12e5361e55077949fc7a1d93sha512: 498877f9e1e731ccaf26a93fe6b8f2de2f1c5d3a1123d9a4e416df032e7d319982ce39544282fbbcacb7e2832e3163d922fb330c47888deee24eb585fa6b25f3ssdeep: 12288:m1wOZhCGsZDpKU+J8eJ3zb17jlcNbcQ3kiqZVBO6/MTtjXgiisQ:gwEhC9KzLjZ7jlVtHc5jrvQtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
0: [No Data]

MSIL/Filecoder.Atom also known as:

K7AntiVirus	Trojan ( 004f98bb1 )
DrWeb	Trojan.Encoder.30066
ALYac	Gen:Variant.Ransom.HiddenTear.1
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:MSIL/Filecoder.5ce81d82
K7GW	Trojan ( 004f98bb1 )
Cybereason	malicious.2c3ee0
Cyren	W32/Crowti.VUHC-1708
Symantec	Trojan.Gen.MBT
ESET-NOD32	MSIL/Filecoder.Atom
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Zusy-7067692-0
Kaspersky	UDS:Trojan.Win32.Generic
BitDefender	Gen:Variant.Ransom.HiddenTear.1
NANO-Antivirus	Trojan.Win32.Filecoder.eptugr
MicroWorld-eScan	Gen:Variant.Ransom.HiddenTear.1
Sophos	Mal/Atom-A
BitDefenderTheta	Gen:NN.ZexaF.34738.Lq0@aiWmiLd
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_ATOM.SM0
McAfee-GW-Edition	Artemis
FireEye	Gen:Variant.Ransom.HiddenTear.1
Emsisoft	Gen:Variant.Ransom.HiddenTear.1 (B)
SentinelOne	Static AI – Malicious SFX
Avira	HEUR/AGEN.1127951
Antiy-AVL	Trojan/Generic.ASMalwS.1B8B1DD
Microsoft	Trojan:Win32/Occamy.C
Arcabit	Trojan.Ransom.HiddenTear.1
AegisLab	Trojan.Win32.Generic.4!c
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Ransom.HiddenTear.1
McAfee	Artemis!24CFDD82C3EE
MAX	malware (ai score=96)
VBA32	Trojan-Ransom.Gen
TrendMicro-HouseCall	Ransom_ATOM.SM0
Rising	Trojan.Generic@ML.99 (RDML:hkTZRv8/3UWBZ9rnDSb0uA)
Yandex	Trojan.Agent!DSkDaoYAy1c
Ikarus	Trojan.MSIL.Filecoder
Fortinet	W32/HiddenTear.1!tr.ransom
AVG	Win32:Malware-gen
Paloalto	generic.ml