MSIL/Filecoder.PadCrypt.E information

The MSIL/Filecoder.PadCrypt.E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Filecoder.PadCrypt.E virus can do?

Network activity detected but not expressed in API logs

How to determine MSIL/Filecoder.PadCrypt.E?


File Info:
crc32: A7C25EB1
md5: 23e6338c9bebf32e18bddb07cd7f4cff
name: 23E6338C9BEBF32E18BDDB07CD7F4CFF.mlw
sha1: 9b76ea6346bb4bdf0410cebd4afb6cf9e6cc35b3
sha256: bff6128dba6c8abf133c4734c085db9ba0cf845ac920e49ae95c1c0d4053c5a3
sha512: 286c8899bc24da572afd40f348d234f6bebba5972b810d877423b976521b6804de82fdfad51f53251a78446cdb1ce3e008a8561f9eb9a216cb3de3af240d5ffb
ssdeep: 6144:IkJZvcv80ikx5acCSOkMB1jbTUsWhHaIjwNBvQGCs4AKow4WCyPlInW/cLP/cxy:IkJuzfwSk1fIZp8NBo4Ug4c5NQBF3
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: 
Assembly Version: 3.0.2.3
InternalName: PadCrypt 3.0.exe
FileVersion: 3.0.2.3
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 3.0.2.3
FileDescription: 
OriginalFilename: PadCrypt 3.0.exe

MSIL/Filecoder.PadCrypt.E also known as:

Elastic	malicious (high confidence)
CAT-QuickHeal	Ransom.PadCrypt.S750071
ALYac	Gen:Heur.Ransom.REntS.Gen.1
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	Trojan:MSIL/Filecoder.178abf27
K7GW	Trojan ( 005092ab1 )
K7AntiVirus	Trojan ( 005092ab1 )
ESET-NOD32	MSIL/Filecoder.PadCrypt.E
APEX	Malicious
Avast	MSIL:Ransom-N [Trj]
Cynet	Malicious (score: 99)
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Heur.Ransom.REntS.Gen.1
MicroWorld-eScan	Gen:Heur.Ransom.REntS.Gen.1
Tencent	Win32.Trojan.Generic.Hsiw
Sophos	Mal/Generic-S
Comodo	Malware@#2oweme0n5ejfg
BitDefenderTheta	Gen:NN.ZemsilF.34142.Vm0@aunIO5g
TrendMicro	Ransom_CRYDAP.F117CL
FireEye	Generic.mg.23e6338c9bebf32e
Emsisoft	Trojan.FileCoder (A)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Ransom.Gen
Avira	HEUR/AGEN.1105877
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Arcabit	Trojan.Ransom.REntS.Gen.1
ZoneAlarm	UDS:DangerousObject.Multi.Generic
AhnLab-V3	Trojan/Win32.FileCoder.C2496094
McAfee	Ransomware-GAK!23E6338C9BEB
Malwarebytes	Malware.AI.4258544602
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_CRYDAP.F117CL
Yandex	Trojan.Filecoder!D4hlTFoyft4
Ikarus	Trojan.MSIL.Filecoder
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/Generic.AP.699B8C!tr
AVG	MSIL:Ransom-N [Trj]
Paloalto	generic.ml

How to remove MSIL/Filecoder.PadCrypt.E?

MSIL/Filecoder.PadCrypt.E removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X