About "MSIL/Filecoder.MO" infection

The MSIL/Filecoder.MO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Filecoder.MO virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/Filecoder.MO?


File Info:
crc32: CA17BD25
md5: e3ebfe44ce200842a9563290de034f9c
name: E3EBFE44CE200842A9563290DE034F9C.mlw
sha1: 1532441f1506f753a91ee4477096f5d92cd3b307
sha256: 49a239f472fec03d9553aa65c4908e353b0b1e832b8b23f5ec326dcea4151cf8
sha512: 6cc79563cce44e69a5c7c548571f25b0e2b08125b43d6f9527a3bfd9bcfcd387e9584749f3bfe968753c754ecb780fc348f8526e9545e8001542ccb020dd767a
ssdeep: 96:hW/1jVhW+w2HvRw/TTtcjaEZecA2FHa7D4rFKtNnlq2nb3l4wgahzNt:o/1Po2P2ntcBXA2FHa7mFKtzq2pfd
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: Ransomware.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Ransomware
ProductVersion: 1.0.0.0
FileDescription: Ransomware
OriginalFilename: Ransomware.exe

MSIL/Filecoder.MO also known as:

K7AntiVirus	Trojan ( 0052c2441 )
Cynet	Malicious (score: 99)
McAfee	Generic.dqz
Cylance	Unsafe
Sangfor	Trojan.MSIL.Agent.usrg
CrowdStrike	win/malicious_confidence_60% (D)
K7GW	Trojan ( 0052c2441 )
Cybereason	malicious.4ce200
Symantec	Trojan Horse
ESET-NOD32	MSIL/Filecoder.MO
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.MSIL.Agent.aba
BitDefender	Gen:Heur.Ransom.MSIL.1
NANO-Antivirus	Trojan.Win32.Ransom.ezglft
MicroWorld-eScan	Gen:Heur.Ransom.MSIL.1
Tencent	Msil.Trojan.Agent.Alsl
Ad-Aware	Gen:Heur.Ransom.MSIL.1
Sophos	Mal/Generic-R + Mal/JLocker-B
Comodo	Malware@#2f3fd9o7vco0i
BitDefenderTheta	Gen:NN.ZemsilF.34692.am0@a0MWY1b
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Generic.dqz
FireEye	Generic.mg.e3ebfe44ce200842
Emsisoft	Trojan.FileCoder (A)
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1110050
Antiy-AVL	Trojan/Generic.ASMalwS.2527695
Microsoft	Trojan:Win32/Tiggre!rfn
AegisLab	Trojan.Win32.Generic.4!c
GData	Gen:Heur.Ransom.MSIL.1
AhnLab-V3	Trojan/Win32.FileCoder.C4005657
VBA32	TrojanRansom.MSIL.Agent
MAX	malware (ai score=94)
Panda	Trj/GdSda.A
Rising	Ransom.Agent!8.6B7 (CLOUD)
Yandex	Trojan.Agent!37emqfncpZs
Ikarus	Gen.Ransom
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Filecoder.MO!tr.ransom
AVG	Win32:Malware-gen

How to remove MSIL/Filecoder.MO?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “MSIL/Filecoder.MO” infection