Malware

What is “MSIL/Filecoder.KY”?

Malware Removal

The MSIL/Filecoder.KY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Filecoder.KY virus can do?

    How to determine MSIL/Filecoder.KY?

    
    

    File Info:

    crc32: D54B8AC7
    md5: b0aa2a5768636da81317f44f92cc39e6
    name: B0AA2A5768636DA81317F44F92CC39E6.mlw
    sha1: c047f7b0dcbfce5a7401234414b1c334f5aaa43a
    sha256: d9191fd984578f53c83b7e2110208e36fde737b294ab0f12b00c8fb119dcbfa1
    sha512: 437106713145c0a04ddce61576f9935b95f3f833df5f88faeceba0e5582bb2fee8f44d734be4d323d68114aa3b9fcb1290cd52b375f30c98e4fed60b838fc744
    ssdeep: 768:VQkOuc4PKH7VJn6chFaMRkmbPHg2XPCur9dkx4pDccapUPMnY:VQkJc4yHhJnF3I2ffhb+OU
    type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

    Version Info:

    Translation: 0x0000 0x04b0
    LegalCopyright: Copyright xa9 2017
    Assembly Version: 1.0.0.0
    InternalName: Zlocker.exe
    FileVersion: 1.0.0.0
    ProductName: Zlocker
    ProductVersion: 1.0.0.0
    FileDescription: Zlocker
    OriginalFilename: Zlocker.exe

    MSIL/Filecoder.KY also known as:

    K7AntiVirusTrojan ( 005201691 )
    CynetMalicious (score: 85)
    ALYacGen:Variant.Ransom.612
    CylanceUnsafe
    ZillyaTool.FakeRansom.Win32.19
    SangforTrojan.Win32.Filecoder.8
    CrowdStrikewin/malicious_confidence_100% (W)
    AlibabaTrojan:Win32/FakeRansom.84fb9c0f
    K7GWTrojan ( 005201691 )
    Cybereasonmalicious.768636
    CyrenW32/Crowti.ATNL-9127
    SymantecTrojan Horse
    ESET-NOD32a variant of MSIL/Filecoder.KY
    APEXMalicious
    AvastWin32:Malware-gen
    KasperskyHoax.Win32.FakeRansom.bz
    BitDefenderGen:Variant.Ransom.612
    NANO-AntivirusTrojan.Win32.Ransom.ewmnlh
    MicroWorld-eScanGen:Variant.Ransom.612
    TencentWin32.Trojan-psw.Fakeransom.Pefq
    Ad-AwareGen:Variant.Ransom.612
    SophosMal/Generic-R + Mal/ZLock-A
    ComodoMalware@#2n3kkl14yrb54
    BitDefenderThetaGen:NN.ZemsilCO.34628.cq0@a8cyBim
    VIPRETrojan.Win32.Generic!BT
    TrendMicroTROJ_FRS.0NA103E820
    McAfee-GW-EditionArtemis!Trojan
    FireEyeGeneric.mg.b0aa2a5768636da8
    EmsisoftGen:Variant.Ransom.612 (B)
    SentinelOneStatic AI – Malicious PE
    JiangminHoax.FakeRansom.u
    WebrootW32.Trojan.Gen
    AviraTR/Ransom.kgztt
    eGambitUnsafe.AI_Score_99%
    KingsoftWin32.PSWTroj.Undef.(kcloud)
    MicrosoftTrojan:Win32/Tiggre!rfn
    ArcabitTrojan.Ransom.612
    AegisLabHacktool.Win32.FakeRansom.3!c
    ZoneAlarmHoax.Win32.FakeRansom.bz
    GDataGen:Variant.Ransom.612
    AhnLab-V3Trojan/Win32.FileCoder.C2387760
    McAfeeArtemis!B0AA2A576863
    MAXmalware (ai score=99)
    PandaTrj/GdSda.A
    TrendMicro-HouseCallTROJ_FRS.0NA103E820
    RisingTrojan.Filecoder!8.68 (CLOUD)
    YandexRiskware.Hoax!qlYUJSzPD4w
    IkarusTrojan-Ransom.FileCrypter
    FortinetMSIL/Filecoder.A!tr
    AVGWin32:Malware-gen
    Paloaltogeneric.ml
    Qihoo-360Win32/Ransom.Generic.HgIASOoA

    How to remove MSIL/Filecoder.KY?

    MSIL/Filecoder.KY removal tool
    • Download and install GridinSoft Anti-Malware.
    • Open GridinSoft Anti-Malware and perform a “Standard scan“.
    • Move to quarantine” all items.
    • Open “Tools” tab – Press “Reset Browser Settings“.
    • Select proper browser and options – Click “Reset”.
    • Restart your computer.

    About the author

    Paul Valéry

    I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

    Leave a Comment