Categories: Malware

MSIL/Filecoder.Jigsaw.D information

The MSIL/Filecoder.Jigsaw.D is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Filecoder.Jigsaw.D virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Installs itself for autorun at Windows startup
Exhibits possible ransomware file modification behavior
Writes a potential ransom message to disk
Network activity detected but not expressed in API logs
Creates a copy of itself

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/Filecoder.Jigsaw.D?


File Info:
crc32: 850D240Emd5: 767e8cd8fd6b60c2d0e078a0981c103dname: 767E8CD8FD6B60C2D0E078A0981C103D.mlwsha1: cdce1c38bb805e570362ef582dfe4bab92328142sha256: 4b805c3a753c023cd539d83b032ee359eced44dae2cb517f3c41b2ba8ee2a7a1sha512: 8036bcda1347809b8716e2bcd4ab92bef8a4a817403f5e45b07614e76305ad23385fca381a413abfb0ef523f2a289b1dbc3a2599d88bb55567f0a0887b5fd573ssdeep: 12288:WZqLPEzRxJ5U18553RHzsmP+agVznWqZa/Cr7mkGJlZCJFJZYts+mmqmmmmmkykA:W8wzbHU18fBHzsmGTGK/GJlZCJFJKtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: Copyright xa9 2010-2016 Alington Media Corp. All Rights Reserved.Assembly Version: 5.0.0.5InternalName: Video.exeFileVersion: 5.0.0.5CompanyName: xa9 Cyotek LtdLegalTrademarks: cyotek.com Adobe Swatch SlidePresentation LoaderComments: A build of Cyotec Ltd. Allowing the user to run Presentations like Powerpoint as ScreensaverProductName: Portable SLS ViewerProductVersion: 5.0.0.5FileDescription: Portable SLS ViewerOriginalFilename: Video.exe

MSIL/Filecoder.Jigsaw.D also known as:

K7AntiVirus	Trojan ( 700000121 )
DrWeb	Trojan.MulDrop6.45926
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Razy.71766
Cylance	Unsafe
Sangfor	PUP.Win32.Razy.71766
Alibaba	Trojan:Win32/Filecoder.54fd2c26
K7GW	Trojan ( 700000121 )
Cybereason	malicious.8fd6b6
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Filecoder.Jigsaw.D
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Scar.opdk
BitDefender	Gen:Variant.Razy.71766
NANO-Antivirus	Trojan.Win32.Drop.eeaqya
MicroWorld-eScan	Gen:Variant.Razy.71766
Tencent	Win32.Trojan.Scar.Ahow
Ad-Aware	Gen:Variant.Razy.71766
Sophos	Mal/Generic-R + Mal/Jigsaw-A
Comodo	Malware@#27zm46d098452
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_JIGSAW.F116FS
McAfee-GW-Edition	GenericRXFL-QD!767E8CD8FD6B
FireEye	Generic.mg.767e8cd8fd6b60c2
Emsisoft	Gen:Variant.Razy.71766 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Scar.gpo
Webroot	W32.Malware.Gen
Avira	HEUR/AGEN.1133609
Antiy-AVL	Trojan/Generic.ASMalwS.197BA85
Kingsoft	Win32.Heur.KVM007.a.(kcloud)
Microsoft	Ransom:MSIL/JigsawLocker.A
Arcabit	Trojan.Razy.D11856
ZoneAlarm	Trojan.Win32.Scar.opdk
GData	Gen:Variant.Razy.71766
McAfee	GenericRXFL-QD!767E8CD8FD6B
MAX	malware (ai score=100)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_JIGSAW.F116FS
Rising	Malware.FakeFolder@CV!1.6ABB (CLOUD)
Yandex	Trojan.Scar!7Rn+wBXkOr0
Ikarus	Trojan-Ransom.JigSaw
Fortinet	MSIL/Jigsaw.D!tr.ransom
AVG	Win32:Malware-gen
Paloalto	generic.ml