Malware

What is “MSIL/Filecoder.EN”?

Malware Removal

The MSIL/Filecoder.EN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Filecoder.EN virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine MSIL/Filecoder.EN?


File Info:

crc32: 12C161B6
md5: d9943f2be5fb3966f019a66c79cc1d81
name: D9943F2BE5FB3966F019A66C79CC1D81.mlw
sha1: 2972ec81cfc076e87ee79f9e427a896e215cc9c4
sha256: 212fb7a71b9aba2de742d336c2a309c1c8773f85a4b77714bd5f704f2c8d5ec6
sha512: 3c22550adebdaa758b64c97e02ec52b0ac2134eaf55bff49c4ebb29d7d4cdc9ebd890fb7a74eddb35e64f7a6ecebc94c007968e74d7d337b003c7f18586ce06d
ssdeep: 192:3FynRk6PqmajOlcrfCsYX2buft6mcGV/2bb:3EnOrjCso2MZV/2b
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: smsss.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: smsss.exe

MSIL/Filecoder.EN also known as:

K7AntiVirusTrojan ( 00503f1b1 )
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop7.19118
CynetMalicious (score: 99)
CAT-QuickHealPUA.GenericFC.S6058759
ALYacTrojan.Ransom.CryptConsole
CylanceUnsafe
ZillyaTrojan.Scatter.Win32.109
SangforTrojan.Win32.Filecoder.8
CrowdStrikewin/malicious_confidence_70% (D)
AlibabaTrojan:Win32/Filecoder.2498f7c7
K7GWTrojan ( 00503f1b1 )
Cybereasonmalicious.be5fb3
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Filecoder.EN
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
KasperskyHEUR:Trojan-Ransom.Win32.Generic
BitDefenderGen:Heur.Ransom.REntS.Gen.1
NANO-AntivirusTrojan.Win32.Scatter.emadzz
MicroWorld-eScanGen:Heur.Ransom.REntS.Gen.1
TencentMalware.Win32.Gencirc.114d4a93
Ad-AwareGen:Heur.Ransom.REntS.Gen.1
SophosMal/CrypSole-A
ComodoMalware@#boik2hambior
BitDefenderThetaGen:NN.ZemsilF.34688.am0@auknfIl
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_CRYPSOLE.SM
FireEyeGeneric.mg.d9943f2be5fb3966
EmsisoftTrojan.FileCoder (A)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Scatter.dt
WebrootW32.Ransom.Gen
AviraTR/FileCoder.crvdr
eGambitUnsafe.AI_Score_99%
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftRansom:Win32/FileCryptor
ArcabitTrojan.Ransom.REntS.Gen.1
GDataMSIL.Trojan-Ransom.CryptConsole.A
AhnLab-V3Trojan/Win32.Cryptconsole.R197886
McAfeeArtemis!D9943F2BE5FB
MAXmalware (ai score=100)
VBA32Trojan.MulDrop
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_CRYPSOLE.SM
RisingRansom.FileCryptor!8.1A7 (C64:YzY0OrHqC0Z+42Kh)
YandexTrojan.Scatter!T36ieiB1t2A
IkarusTrojan.MSIL.Filecoder
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Filecoder.5028!tr.ransom
AVGWin32:RansomX-gen [Ransom]
Paloaltogeneric.ml

How to remove MSIL/Filecoder.EN?

MSIL/Filecoder.EN removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment