Ransom • Trojan

Trojan-Ransom.MSIL.Encoder.vho removal guide

The Trojan-Ransom.MSIL.Encoder.vho is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Ransom.MSIL.Encoder.vho virus can do?

How to determine Trojan-Ransom.MSIL.Encoder.vho?


File Info:
crc32: C36C5DFC
md5: 45eb1534fe7bf40c83e54db1f2ed9c46
name: 45EB1534FE7BF40C83E54DB1F2ED9C46.mlw
sha1: 5e4a4f90af6272bffaf92f401825b6cbca99a0a8
sha256: 2df8cbaa4e40ef95dc15c94d0036bbd58a3ef91520cfce2bc8a6b73bfa7784a4
sha512: 24a6f6548f7e37fc66c1474e1c3b33e064e22c49e1bdedc77f57ae9deb13f990b8ad72ba923066100fc11b0cc6318d573f27ed4d93ba54db85aca7e9d060d729
ssdeep: 1536:q1qwTNnil7QFdl083/Mm5fS9psiqMX0S9WqRZxOz48C2kF/H5myGOPFU6:NeNU7sdl083v1S9pZtL9jsM8Cn4y166
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2020
Assembly Version: 1.0.0.0
InternalName: ElevatorMonitoring.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: ElevatorMonitoring
ProductVersion: 1.0.0.0
FileDescription: ElevatorMonitoring
OriginalFilename: ElevatorMonitoring.exe

Trojan-Ransom.MSIL.Encoder.vho also known as:

Cynet	Malicious (score: 90)
ALYac	Trojan.GenericKD.45247059
Cylance	Unsafe
Zillya	Dropper.Agent.Win32.441627
Sangfor	Trojan.Win32.Save.a
Alibaba	Trojan:Win32/CryptoObfuscator.8455955a
Cybereason	malicious.4fe7bf
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan-Ransom.MSIL.Encoder.vho
BitDefender	Trojan.GenericKD.45247059
MicroWorld-eScan	Trojan.GenericKD.45247059
Ad-Aware	Trojan.GenericKD.45247059
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZemsilF.34608.gm0@aysgYBp
TrendMicro	Ransom_Encoder.R067C0WAR21
FireEye	Generic.mg.45eb1534fe7bf40c
Emsisoft	Trojan.GenericKD.45247059 (B)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Trojan.Gen
eGambit	Unsafe.AI_Score_99%
Microsoft	Backdoor:Win32/Bladabindi!ml
GData	Trojan.GenericKD.45247059
McAfee	Artemis!45EB1534FE7B
MAX	malware (ai score=83)
TrendMicro-HouseCall	Ransom_Encoder.R067C0WAR21
Ikarus	Trojan.MSIL.CryptoObfuscator
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Malicious_Behavior.SB
AVG	Win32:Malware-gen

How to remove Trojan-Ransom.MSIL.Encoder.vho?

Trojan-Ransom.MSIL.Encoder.vho removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X