MSIL/Filecoder.PadCrypt.F information

The MSIL/Filecoder.PadCrypt.F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Filecoder.PadCrypt.F virus can do?

How to determine MSIL/Filecoder.PadCrypt.F?


File Info:
crc32: 08F291DC
md5: 671bef81158df7f25422a1b8bf381aae
name: 671BEF81158DF7F25422A1B8BF381AAE.mlw
sha1: bf7be06e4c507d47192afa7e5eb71429b95db2dd
sha256: 8cd3c876217a3f7a3026a6fd9ca4a41d140d764b2a5a122e4c08fb8561b528d7
sha512: 68100df87af4d687dd8e71d29f76f7c40e8da4c505045a4dcc5cd880203820b935f9cf360ddfd50c6af8457fe8f593c51c737de2b2dfe9a362d4f9085cebd661
ssdeep: 12288:ILCMimNzfwSk1fIZp8NBo4UgxDASDcuXL3PIItJ:cIp1c8NBolgBdDfb3
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2016
Assembly Version: 11.37.0.0
InternalName: ptsks.exe
FileVersion: 11.37.0.0
CompanyName: Microsoft Corporation
LegalTrademarks: 
Comments: 
ProductName: Microsoft
ProductVersion: 11.37.0.0
FileDescription: Windows Driver Service
OriginalFilename: ptsks.exe

MSIL/Filecoder.PadCrypt.F also known as:

K7AntiVirus	Trojan ( 700000121 )
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader24.10310
Cynet	Malicious (score: 90)
ALYac	Trojan.Ransom.PadCrypt
Cylance	Unsafe
Zillya	Trojan.Filecoder.Win32.7573
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:MSIL/Filecoder.0f537a77
K7GW	Trojan ( 700000121 )
Cybereason	malicious.1158df
Symantec	Ransom.PadCrypt
ESET-NOD32	a variant of MSIL/Filecoder.PadCrypt.F
APEX	Malicious
Avast	MSIL:Ransom-N [Trj]
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Ransom.PadCrypt.14
NANO-Antivirus	Trojan.Win32.Filecoder.engpph
SUPERAntiSpyware	Ransom.Cryptor/Variant
MicroWorld-eScan	Gen:Variant.Ransom.PadCrypt.14
Tencent	Malware.Win32.Gencirc.10bc01a3
Ad-Aware	Gen:Variant.Ransom.PadCrypt.14
Sophos	ML/PE-A
Comodo	Malware@#3q3nu8evhz12u
BitDefenderTheta	Gen:NN.ZemsilF.34608.Rn0@aScl!oi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_CRYDAP.SMQ
McAfee-GW-Edition	GenericRXBC-MI!671BEF81158D
FireEye	Generic.mg.671bef81158df7f2
Emsisoft	Gen:Variant.Ransom.PadCrypt.14 (B)
Webroot	W32.Ransomware.Gen
Avira	TR/FileCoder.bzuyf
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Skeeyah.A!rfn
AegisLab	Trojan.Win32.Generic.4!c
GData	Gen:Variant.Ransom.PadCrypt.14
AhnLab-V3	Trojan/Win32.Dynamer.C1879386
McAfee	GenericRXBC-MI!671BEF81158D
MAX	malware (ai score=100)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Trojan.Dropper
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_CRYDAP.SMQ
Rising	Ransom.FileCryptor!8.1A7 (CLOUD)
Yandex	Trojan.Agent!wNcfgF3Lh1k
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/Generic.AP.9D47C!tr
AVG	MSIL:Ransom-N [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Filecoder.HwMAevkA

How to remove MSIL/Filecoder.PadCrypt.F?

MSIL/Filecoder.PadCrypt.F removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X