MSIL/Filecoder.FG removal instruction

The MSIL/Filecoder.FG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Filecoder.FG virus can do?

The binary likely contains encrypted or compressed data.

How to determine MSIL/Filecoder.FG?


File Info:
crc32: C4BCD3F5
md5: 535411a6ca65fd3f384847dc933f66f3
name: 535411A6CA65FD3F384847DC933F66F3.mlw
sha1: f6c753c53a0bc3ff07069c00f113a040b376d0ea
sha256: 92483e0cbec4f49aa00a078b2b1ef4d52bf1508426199748254f1235956435e3
sha512: fcaf87ed00d8152265577e9b03a4a987cb7e350196e453d7547e7a36875594767bb9cd3ebfd524a02b4153428b5dc2d0d1ef522ce3b337fb57f6336edd3a4bde
ssdeep: 3072:UEeo5Dei1YEo+eip7trJ7c+BaqhSVbKEIvZJqhWSpIBiihO:U9oQkohixtrJzBaBJKLOhEQih
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2017
Assembly Version: 1.0.0.0
InternalName: cryptoclone.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: cryptoclone
ProductVersion: 1.0.0.0
FileDescription: cryptoclone
OriginalFilename: cryptoclone.exe

MSIL/Filecoder.FG also known as:

K7AntiVirus	Trojan ( 00508ebf1 )
Cynet	Malicious (score: 99)
ALYac	Trojan.Ransom.CryptoClone
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (D)
K7GW	Trojan ( 00508ebf1 )
Symantec	Ransom.Cryptolocker
ESET-NOD32	a variant of MSIL/Filecoder.FG
APEX	Malicious
Avast	Win32:Malware-gen
NANO-Antivirus	Trojan.Win32.Ransom.exnxdi
Tencent	Msil.Trojan.Msilperseus.Stua
Sophos	Mal/StupCryp-A
BitDefenderTheta	Gen:NN.ZemsilF.34678.jm0@aeNx20i
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Ransomware-GGR!535411A6CA65
Emsisoft	Trojan.Ransom.CryptoClone (A)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1117517
Microsoft	Backdoor:Win32/Bladabindi!ml
AegisLab	Trojan.Win32.Generic.4!c
GData	MSIL.Trojan-Ransom.FTSCoder.B
AhnLab-V3	Trojan/Win32.Dynamer.C3256231
McAfee	Ransomware-GGR!535411A6CA65
MAX	malware (ai score=100)
VBA32	TScope.Trojan.MSIL
Panda	Trj/GdSda.A
Rising	Ransom.FileCryptor!8.1A7 (CLOUD)
Yandex	Trojan.Filecoder!FQhOg3/Gauo
Ikarus	Trojan-Ransom.FileCrypter
Fortinet	MSIL/Filecoder.FG!tr.ransom
AVG	Win32:Malware-gen

How to remove MSIL/Filecoder.FG?

MSIL/Filecoder.FG removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X