Should I remove "MSIL/Filecoder.iRansom.A"?

The MSIL/Filecoder.iRansom.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Filecoder.iRansom.A virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/Filecoder.iRansom.A?


File Info:
crc32: 6DA28159
md5: e1dc6a8b67b88c90719d27ecbbb24e64
name: E1DC6A8B67B88C90719D27ECBBB24E64.mlw
sha1: 5976b95372e54f6f5d3db68cb132a2718ff46141
sha256: 31975b3176e5f3994aa70c28109a3e33aba6346bc3c0de872d1551b55ec4a7bf
sha512: 06e384039385aa41bea967b1b6ee5b8cbb5828e156ba30631c38faaf48c3398c1a1f71d94e512ec855f4a33186e48ed50231eb604b903b82c63edd84008f6217
ssdeep: 1536:UFzlKcgPmUEVWIp+0JBjutLETFdkP4TMUz:UecgKoIpPJBjutLETFdkP4TMU
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2016
Assembly Version: 1.0.0.0
InternalName: iRansom.exe
FileVersion: 1.0.0.0
ProductName: iRansom
ProductVersion: 1.0.0.0
FileDescription: iRansom
OriginalFilename: iRansom.exe

MSIL/Filecoder.iRansom.A also known as:

K7AntiVirus	Trojan ( 005159d71 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.13953
ALYac	Trojan.Ransom.iRansom
Cylance	Unsafe
K7GW	Trojan ( 005159d71 )
Cybereason	malicious.b67b88
Symantec	Ransom.Cryptolocker
ESET-NOD32	a variant of MSIL/Filecoder.iRansom.A
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Packed.Razy-7602351-0
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Trojan.GenericKD.12203751
NANO-Antivirus	Trojan.Win32.Encoder.esgnxo
MicroWorld-eScan	Trojan.GenericKD.12203751
Tencent	Win32.Trojan.Generic.Akoy
Ad-Aware	Trojan.GenericKD.12203751
Sophos	Mal/Generic-R + Troj/iLocked-A
Comodo	Malware@#f8c253upa5qj
BitDefenderTheta	Gen:NN.ZemsilF.34142.gm0@a8Dju6i
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_ILOCKED.B
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.e1dc6a8b67b88c90
Emsisoft	Trojan.Ransom.iRansom (A)
SentinelOne	Static AI – Malicious PE
Microsoft	Backdoor:Win32/Bladabindi!ml
GData	Trojan.GenericKD.12203751
McAfee	Artemis!E1DC6A8B67B8
MAX	malware (ai score=100)
VBA32	CIL.HeapOverride.Heur
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom_ILOCKED.B
Ikarus	Trojan.SuspectCRC
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Generik.ELGPJBF!tr
AVG	Win32:Malware-gen

How to remove MSIL/Filecoder.iRansom.A?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “MSIL/Filecoder.iRansom.A”?