Ransom

Should I remove “Ransom:MSIL/FileCoder.PA!MTB”?

Malware Removal

The Ransom:MSIL/FileCoder.PA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Ransom:MSIL/FileCoder.PA!MTB virus can do?

  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.

How to determine Ransom:MSIL/FileCoder.PA!MTB?



File Info:

crc32: 0A46BAE4
md5: 7614496b017e522662ed7c414d097ffa
name: 7614496B017E522662ED7C414D097FFA.mlw
sha1: 834cbc1f27cab6b73f0bbb28a714b22b0ef3de0e
sha256: 96d69c26cbe2da4776038a80f25624b125ed37562b553e6a7fbd801479001cb9
sha512: 7250bbd96e166637d7afabd3931d2135c99b7d2c2fae8e760e102e95071dd0f895f45f92e88bc9dddcd2811a0859f133efba2f8d0e0b59ff7f6e19c1441d5968
ssdeep: 768:Y0uU1I59WCrPxDF/O5c6krQRXHXEufalYj:PI59WCbx9Xod0Cb
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2015
Assembly Version: 1.0.0.0
InternalName: DUMB.exe
FileVersion: 1.0.0.0
ProductName: DUMB
ProductVersion: 1.0.0.0
FileDescription: DUMB
OriginalFilename: DUMB.exe

Ransom:MSIL/FileCoder.PA!MTB also known as:

K7AntiVirusTrojan ( 0056a4581 )
DrWebTrojan.Encoder.15077
CynetMalicious (score: 85)
ALYacGeneric.Ransom.Koolova.EA5B82A9
CylanceUnsafe
ZillyaTrojan.Filecoder.Win32.6651
SangforTrojan.Win32.Koolova.usrg
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:MSIL/FileCoder.f5de9928
K7GWTrojan ( 0056a4581 )
Cybereasonmalicious.b017e5
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Filecoder.DY
APEXMalicious
AvastWin32:Malware-gen
BitDefenderGeneric.Ransom.Koolova.EA5B82A9
NANO-AntivirusTrojan.Win32.Filecoder.eurqhp
MicroWorld-eScanGeneric.Ransom.Koolova.EA5B82A9
TencentWin32.Trojan.Ransom.Afhk
Ad-AwareGeneric.Ransom.Koolova.EA5B82A9
SophosMal/Crypdum-A
BitDefenderThetaGen:NN.ZemsilF.34628.cm0@aakZsfm
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_FileCoder.R002C0DK320
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.Ransom.Koolova.EA5B82A9
EmsisoftGeneric.Ransom.Koolova.EA5B82A9 (B)
AviraTR/Ransom.bdmlx
MicrosoftRansom:MSIL/FileCoder.PA!MTB
AegisLabTrojan.Win32.Generic.4!c
GDataMSIL.Trojan-Ransom.Pufmanhu.B
AhnLab-V3Malware/Win32.RL_Generic.R267815
McAfeeArtemis!7614496B017E
MAXmalware (ai score=99)
VBA32TScope.Trojan.MSIL
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_FileCoder.R002C0DK320
IkarusAdWare.Dotdo
FortinetMSIL/Filecoder.DY!tr.ransom
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Generic.HgIASOUA

How to remove Ransom:MSIL/FileCoder.PA!MTB?

Ransom:MSIL/FileCoder.PA!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment