Should I remove “MSIL/Hoax.FakeFilecoder.T”?

The MSIL/Hoax.FakeFilecoder.T is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Hoax.FakeFilecoder.T virus can do?

Presents an Authenticode digital signature

How to determine MSIL/Hoax.FakeFilecoder.T?


File Info:
crc32: 342A8DE1
md5: 16ada51dc0a062f8608da8922b0fc9f8
name: 16ADA51DC0A062F8608DA8922B0FC9F8.mlw
sha1: 32a8acd2108ecdb9b4b16bcf27a25c4dcee9d9d8
sha256: 532003b3c8b68c6b82d0731213e709bdebdd67a7836155c0a4ebdeea354cc761
sha512: 545521672f74fc17ba4d4f5a68247daa33fe00a70ed78399f925595195ac65ad5b51bd752bce2e67607b40a1f5ac6e13adb951f96671d7394c840cd8592ac202
ssdeep: 1536:FOprN/o4WuQvQcH/SbkMI2snraXy9gCQESlR7CQESlEZ:JNaIRraXS2Y2EZ
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Microsoft Corporation. All right reserved  2017
Assembly Version: 1.0.0.0
InternalName: Blooper.exe
FileVersion: 1.0.0.0
CompanyName: Microsoft Corporation
LegalTrademarks: 
Comments: 
ProductName: Microsoft Windows Operating System
ProductVersion: 1.0.0.0
FileDescription: Bloopers
OriginalFilename: Blooper.exe

MSIL/Hoax.FakeFilecoder.T also known as:

K7AntiVirus	Trojan ( 0050f8761 )
McAfee	Artemis!16ADA51DC0A0
Cylance	Unsafe
Zillya	Tool.FakeFilecoder.Win32.7
Alibaba	Hoax:MSIL/FakeFilecoder.cb40fdc0
K7GW	Trojan ( 0050f8761 )
Cybereason	malicious.dc0a06
Symantec	Trojan.Gen.2
ESET-NOD32	MSIL/Hoax.FakeFilecoder.T
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Heur.Ransom.HiddenTears.1
NANO-Antivirus	Trojan.Win32.Johnnie.eptuwj
MicroWorld-eScan	Gen:Heur.Ransom.HiddenTears.1
Tencent	Malware.Win32.Gencirc.114af998
Ad-Aware	Gen:Heur.Ransom.HiddenTears.1
Sophos	Generic PUA DC (PUA)
Comodo	Malware@#36z0l4z2h3x7i
BitDefenderTheta	Gen:NN.ZemsilF.34670.dm1@aeZDmv
TrendMicro	Ransom_FAKERA.A
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Heur.Ransom.HiddenTears.1
Emsisoft	Gen:Heur.Ransom.HiddenTears.1 (B)
Microsoft	Trojan:Win32/Tiggre!rfn
Arcabit	Trojan.Ransom.HiddenTears.1
AegisLab	Trojan.Multi.Generic.4!c
GData	Gen:Heur.Ransom.HiddenTears.1
VBA32	Trojan.MSIL.gen.a.4
MAX	malware (ai score=100)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_FAKERA.A
Rising	Trojan.Bitrep!8.F596 (CLOUD)
Fortinet	MSIL/Filecoder.C37C!tr.ransom
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.HwMAt0sA

How to remove MSIL/Hoax.FakeFilecoder.T?

MSIL/Hoax.FakeFilecoder.T removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X