Categories: Ransom

Ransom:Win32/FileCoder.TX!MSR (file analysis)

The Ransom:Win32/FileCoder.TX!MSR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom:Win32/FileCoder.TX!MSR virus can do?

A process attempted to delay the analysis task.
At least one IP Address, Domain, or File Name was found in a crypto call
The binary likely contains encrypted or compressed data.
Attempts to stop active services
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Ransom:Win32/FileCoder.TX!MSR?


File Info:
crc32: F04EE9C0md5: fcd21c6fca3b9378961aa1865bee7ecbname: FCD21C6FCA3B9378961AA1865BEE7ECB.mlwsha1: 0abaa05da2a05977e0baf68838cff1712f1789e0sha256: 4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458sha512: e39c1f965f6faeaa33dfec6eba23fbfff14b287f4777797ea79480bb037d6d806516bda7046315e051961fce12e935ac546819c1e0bef5c33568d68955a9792assdeep: 1536:7ZLTzASUIG0TOOYTufIaSWvRYkekdvizSBXxNe9VPw6s6aUCT7Q7qn:OBI9HYyfNBdviGBBQsrhPk4type: PE32 executable (console) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Ransom:Win32/FileCoder.TX!MSR also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.Ransom.Imps.1
FireEye	Generic.mg.fcd21c6fca3b9378
CAT-QuickHeal	Trojan.AntiavRI.S16503365
ALYac	Trojan.Ransom.Filecoder
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Heur.Ransom.Imps.1
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (W)
TrendMicro	Ransom.Win32.EXX.THFBIBO
BitDefenderTheta	Gen:NN.ZexaF.34634.jqX@aSrEMZp
Cyren	W32/Application.NQFT-2663
Symantec	Trojan.Gen.MBT
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Ransomware.RansomEXX-9791878-0
Kaspersky	Trojan-Ransom.Win32.Encoder.jdq
Alibaba	Ransom:Win32/FileCoder.91a097cd
NANO-Antivirus	Trojan.Win32.AntiAV.hlxgzi
ViRobot	Trojan.Win32.Z.Ransom.159744.B
Tencent	Malware.Win32.Gencirc.10ce0c91
Ad-Aware	Gen:Heur.Ransom.Imps.1
TACHYON	Ransom/W32.RansomEXX.159744
Sophos	Troj/Ransom-GAJ
Comodo	Malware@#2tb6kn7pzjjmt
F-Secure	Trojan.TR/FileCoder.fvtyr
DrWeb	Trojan.Encoder.32006
Zillya	Trojan.Filecoder.Win32.14952
Invincea	Mal/Generic-S + Troj/Ransom-GAJ
McAfee-GW-Edition	BehavesLike.Win32.Agent.ch
Emsisoft	Gen:Heur.Ransom.Imps.1 (B)
Ikarus	Trojan-Ransom.Ransomexx
Jiangmin	Trojan.Encoder.wa
MaxSecure	Trojan.Malware.425.susgen
Avira	TR/FileCoder.fvtyr
Antiy-AVL	Trojan[Ransom]/Win32.Encoder
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Ransom:Win32/FileCoder.TX!MSR
Arcabit	Trojan.Ransom.Imps.1
ZoneAlarm	Trojan-Ransom.Win32.Encoder.jdq
GData	Gen:Heur.Ransom.Imps.1
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C4125714
Acronis	suspicious
McAfee	GenericRXMI-RO!FCD21C6FCA3B
MAX	malware (ai score=100)
VBA32	Malware-Cryptor.Inject.gen
Malwarebytes	Ransom.RansomEXX
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Filecoder.OCN
TrendMicro-HouseCall	Ransom.Win32.EXX.THFBIBO
Rising	Ransom.Filecoder!8.55A8 (TFE:3:MXdswzG9iuB)
Yandex	Trojan.Filecoder!6iHpGI11fEI
SentinelOne	Static AI – Malicious PE
eGambit	Trojan.Generic
Fortinet	W32/Encoder.JDQ!tr.ransom
Webroot	W32.Malware.Gen
AVG	Win32:Malware-gen
Cybereason	malicious.fca3b9
Avast	Win32:Malware-gen
Qihoo-360	Win32/Trojan.Anti.afe