Categories: Malware

What is “Win32/Filecoder.NLX”?

The Win32/Filecoder.NLX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Filecoder.NLX virus can do?

  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Filecoder.NLX?


File Info:

crc32: F548F1CBmd5: 6fbcbec6c52dae60ac34938c5594b300name: 6FBCBEC6C52DAE60AC34938C5594B300.mlwsha1: 373bccdd3c9050ecabf48aed8ef72ac1df3b5afbsha256: a8aafd730685e525aedf0382ea8a2497359e5b5ffa98b90a6b7cefb7ab7856e9sha512: 9e1cb3670a00db36ba6b76b7baae34287ec6512b2134d2cd65660fbc961ec4e145b8a5fb53514e89c5fe22d4fb49a6cbebff5d2d9ddb966b5adc32ddeed8f4e3ssdeep: 12288:OCdOy3vVrKxR5CXbNjAOxK/j2n+4YG/6c1mFFja3mXgcjfJilgsUFc/DdtwjY5yw:OCdxte/80jYLT3U1jfH5c/5twEYILpdtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xc2xa91999-2015 Jonathan Bennett & AutoIt TeamProductVersion: 3.3.14.2FileVersion: 127.0.0.1Comments: http://www.autoitscript.com/autoit3/FileDescription: File FolderTranslation: 0x0409 0x04b0

Win32/Filecoder.NLX also known as:

Bkav W32.AIDetect.malware1
K7AntiVirus Trojan ( 005106021 )
Elastic malicious (high confidence)
DrWeb Trojan.KillFiles.63887
Cynet Malicious (score: 100)
ALYac Trojan.GenericKD.32154229
Cylance Unsafe
Sangfor Trojan.Win32.Save.a
Alibaba Ransom:Win32/CryFile.61f21a8a
K7GW Trojan ( 005106021 )
Cybereason malicious.6c52da
Symantec Trojan.Gen.2
ESET-NOD32 a variant of Win32/Filecoder.NLX
APEX Malicious
Avast FileRepMalware
Kaspersky Trojan-Ransom.Win32.CryFile.zzp
BitDefender Trojan.GenericKD.32154229
NANO-Antivirus Trojan.Win32.CryFile.fkexvc
MicroWorld-eScan Trojan.GenericKD.32154229
Tencent Win32.Trojan.Raas.Auto
Ad-Aware Trojan.GenericKD.32154229
Sophos Mal/Generic-S
Comodo Malware@#2ta6zx6vo8p73
McAfee-GW-Edition BehavesLike.Win32.TrojanAitInject.dh
FireEye Generic.mg.6fbcbec6c52dae60
Emsisoft Trojan.GenericKD.32154229 (B)
Webroot Trojan.Win32.Swisyn
Avira HEUR/AGEN.1134135
eGambit Unsafe.AI_Score_52%
Microsoft Trojan:Win32/Tiggre!rfn
Arcabit Trojan.Generic.D1EAA275
AegisLab Trojan.Win32.Generic.4!e
GData Trojan.GenericKD.32154229
AhnLab-V3 Malware/Win32.Generic.C2871971
Acronis suspicious
McAfee Artemis!6FBCBEC6C52D
MAX malware (ai score=85)
VBA32 TrojanRansom.CryFile
Panda Trj/CI.A
Ikarus Trojan-Ransom.GandCrab
MaxSecure Trojan.Malware.300983.susgen
Fortinet AutoIt/Filecoder.NLX!tr.ransom
AVG FileRepMalware
Paloalto generic.ml

How to remove Win32/Filecoder.NLX?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

About “Trojan-Downloader.Win32.Upatre.fxzr” infection

The Trojan-Downloader.Win32.Upatre.fxzr is considered dangerous by lots of security experts. When this infection is active,…

6 mins ago

What is “Script:SNH-gen [Drp]”?

The Script:SNH-gen [Drp] is considered dangerous by lots of security experts. When this infection is…

18 mins ago

Backdoor.MSIL.Bladabindi.cguk removal guide

The Backdoor.MSIL.Bladabindi.cguk is considered dangerous by lots of security experts. When this infection is active,…

22 mins ago

Should I remove “W32/Autorun-BXQ”?

The W32/Autorun-BXQ is considered dangerous by lots of security experts. When this infection is active,…

26 mins ago

What is “Worm.Win32.AutoRun.gms”?

The Worm.Win32.AutoRun.gms is considered dangerous by lots of security experts. When this infection is active,…

26 mins ago

What is “Trojan:Win32/Zenpak.ASAF!MTB”?

The Trojan:Win32/Zenpak.ASAF!MTB is considered dangerous by lots of security experts. When this infection is active,…

32 mins ago