Malware

Win32/Filecoder.NKS information

Malware Removal

The Win32/Filecoder.NKS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Filecoder.NKS virus can do?

  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Likely virus infection of existing system binary
  • Anomalous binary characteristics

How to determine Win32/Filecoder.NKS?


File Info:

crc32: 8EC219CA
md5: bb74ae20d7a1e54c34742ae7c02b5a94
name: BB74AE20D7A1E54C34742AE7C02B5A94.mlw
sha1: 0801d88ed026cc4b0af7e7252722a2ee383b8219
sha256: 23b0f557a177de88828327d8ed6648b6f9126d0cb6a0128143c38927f3a53609
sha512: df5102b5ec836ed1dd7ad67585c1fb08cd27563cbf86afb8d3e06e0e278a926c9d122d32f386e4e559a80437122c726c668e4e8d8befd7ace1a4672e9a581024
ssdeep: 1536:Pm35m4d037rrwstPJsZD6Sa7x5f6vLaS:ezKn7x5f62
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Filecoder.NKS also known as:

Elasticmalicious (high confidence)
DrWebTrojan.MulDrop15.62499
MicroWorld-eScanGen:Heur.Mint.Zard.5
FireEyeGen:Heur.Mint.Zard.5
CAT-QuickHealTrojan.IGENERIC
ALYacGen:Heur.Mint.Zard.5
CylanceUnsafe
SangforRansom.Win32.Filecoder.NKS
K7AntiVirusTrojan ( 0050b54b1 )
BitDefenderGen:Heur.Mint.Zard.5
K7GWTrojan ( 0050b54b1 )
Cybereasonmalicious.0d7a1e
CyrenW32/Trojan.GACY-0172
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Virus.Win32.Infector
AlibabaTrojan:Win32/Filecoder.ef215e8d
RisingVirus.Infector!8.1E20 (CLOUD)
Ad-AwareGen:Heur.Mint.Zard.5
SophosMal/Generic-S
F-SecureTrojan.TR/FileCoder.gshwy
VIPREBehavesLike.Win32.Malware.eah (mx-v)
TrendMicroTROJ_GEN.R067C0PLL20
McAfee-GW-EditionGenericRXMT-YW!BB74AE20D7A1
EmsisoftGen:Heur.Mint.Zard.5 (B)
AviraTR/FileCoder.gshwy
MAXmalware (ai score=83)
MicrosoftTrojan:Win32/Ymacco.AA23
GridinsoftRansom.Win32.Wacatac.sa
ArcabitTrojan.Mint.Zard.5
ZoneAlarmHEUR:Virus.Win32.Infector
GDataGen:Heur.Mint.Zard.5
CynetMalicious (score: 85)
AhnLab-V3Malware/Win32.RL_Generic.R370208
McAfeeGenericRXMT-YW!BB74AE20D7A1
VBA32BScope.TrojanRansom.FileCrypter
MalwarebytesRansom.FileCryptor
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Filecoder.NKS
TrendMicro-HouseCallTROJ_GEN.R067C0PLL20
TencentWin32.Trojan.Filecoder.Phge
IkarusTrojan-Ransom.FileCrypter
FortinetW32/Filecoder.NKS!tr.ransom
AVGWin32:Trojan-gen
Qihoo-360Win32/Ransom.Filecoder.HgIASQEA

How to remove Win32/Filecoder.NKS?

Win32/Filecoder.NKS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment