MSIL/Hoax.FakeFilecoder.K information

The MSIL/Hoax.FakeFilecoder.K is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Hoax.FakeFilecoder.K virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/Hoax.FakeFilecoder.K?


File Info:
crc32: 14822378
md5: 60ab964a4ddf67b84682638970e77764
name: 60AB964A4DDF67B84682638970E77764.mlw
sha1: 16ccd53d8fb205bbad4f367e93448853be6520b8
sha256: cd7542f2d7f2285ab524a57bc04ae1ad9306a15b9efbf56ea7b002d99d4b974f
sha512: 62530c993c8f45ce8ca20d23396ec3ad5a17fcd96b6c8258a44e9e0f20fe7bd14401e28e00e3fb57fface0f2d894f43df6ae5ea88f9781e5f22ecb5e6490c1f5
ssdeep: 3072:IqC7Q+F9LeowP0XX4wXXXXX4XBXXXXXXXXXXXbUYUYUUYYUYUYUYUYUYUUYUYUN:bC7Q+FYoA03duZ
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2017
Assembly Version: 1.0.0.0
InternalName: WannaCrypt 4.0.exe
FileVersion: 1.0.0.0
ProductName: WannaCrypt 4.0
ProductVersion: 1.0.0.0
FileDescription: WannaCrypt 4.0
OriginalFilename: WannaCrypt 4.0.exe

MSIL/Hoax.FakeFilecoder.K also known as:

K7AntiVirus	Trojan ( 00539ef61 )
Cynet	Malicious (score: 99)
ALYac	Misc.Hoax
Cylance	Unsafe
Sangfor	Ransom.Win32.WannaCryptor.J
Alibaba	Ransom:MSIL/Manna.c7de0ad4
K7GW	Trojan ( 00539ef61 )
Cybereason	malicious.a4ddf6
Cyren	W32/FakeWannaC.ZXFX-4057
Symantec	Ransom.Wannacry
ESET-NOD32	a variant of MSIL/Hoax.FakeFilecoder.K
APEX	Malicious
Avast	MSIL:Filecoder-Q [Trj]
Kaspersky	Trojan-Ransom.MSIL.Manna.b
BitDefender	Trojan.Ransom.WannaCryptor.J
NANO-Antivirus	Trojan.Win32.Ransom.epafas
ViRobot	Hoax.WannaCry.220672
MicroWorld-eScan	Trojan.Ransom.WannaCryptor.J
Tencent	Win32.Trojan.Wannacry.Ejbq
Ad-Aware	Trojan.Ransom.WannaCryptor.J
Sophos	Troj/FakeWana-A
Comodo	Malware@#hnz3rx4z3ilt
BitDefenderTheta	Gen:NN.ZemsilF.34770.nq0@aSoysek
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_FAKEWCRY.C
McAfee-GW-Edition	Trojan-FMTK!60AB964A4DDF
FireEye	Trojan.Ransom.WannaCryptor.J
Emsisoft	Trojan.Ransom.WannaCryptor.J (B)
Jiangmin	Trojan.MSIL.jzaq
Webroot	W32.Trojan.Ransom.Wannacrypt
Avira	JOKE/FakeFilecoder.eomar
Microsoft	Ransom:Win32/WannaCrypt!rfn
Arcabit	Trojan.Ransom.WannaCryptor.J
AegisLab	Trojan.MSIL.Manna.j!c
GData	Trojan.Ransom.WannaCryptor.J
AhnLab-V3	Trojan/Win32.FakeWanna.C1954226
McAfee	Trojan-FMTK!60AB964A4DDF
MAX	malware (ai score=100)
VBA32	Hoax.MSIL.Manna
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_FAKEWCRY.C
Yandex	Trojan.Manna!6SFBwJ4TXdA
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Filecoder
AVG	MSIL:Filecoder-Q [Trj]
Paloalto	generic.ml

How to remove MSIL/Hoax.FakeFilecoder.K?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSIL/Hoax.FakeFilecoder.K information