Win32/Filecoder.NOM removal guide

The Win32/Filecoder.NOM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Filecoder.NOM virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Win32/Filecoder.NOM?


File Info:
crc32: 1DF16814
md5: acf8562290db24f32518449ab2008232
name: ACF8562290DB24F32518449AB2008232.mlw
sha1: e17ae4f1a981dc8999ec33f9437a9d80012a9c28
sha256: 91bca1753cd12c1ee5c7e26ed62cf2129263b69e5a0740af807daae397eacd97
sha512: f5426cdb698682139d898be3fc0f94d118f317d6277f71d2377fd9c81543e0af39b8b300d7d242936d398c43eedcddc0209dcbb936f08e58239e86d385c67410
ssdeep: 384:Q+Udem3DLVTnovdmYYkTacjwxpkIsLlmIwTbJ6QDIllArRwqMnzUPRFd7D+kgbCK:sBLVsne3xe3xmIw/IQDvRDMm7Du8iF
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/Filecoder.NOM also known as:

DrWeb	Trojan.Encoder.15180
ALYac	Trojan.GenericKD.34983049
Cylance	Unsafe
Zillya	Trojan.CryFile.Win32.256
Sangfor	Suspicious.Win32.Johnnie.76068
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/CryFile.c34151f8
K7GW	Trojan ( 0051c46e1 )
K7AntiVirus	Trojan ( 0051c46e1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Filecoder.NOM
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.CryFile.bmy
BitDefender	Trojan.GenericKD.34983049
MicroWorld-eScan	Trojan.GenericKD.34983049
Tencent	Win32.Trojan.Raas.Auto
Ad-Aware	Trojan.GenericKD.34983049
Comodo	Malware@#s09h6imb3jvg
TrendMicro	Ransom_FILL.A
McAfee-GW-Edition	Artemis!Trojan
FireEye	Trojan.GenericKD.34983049
Emsisoft	Trojan.FileCoder (A)
Jiangmin	Trojan.CryFile.eu
Microsoft	Trojan:Win32/Ymacco.AA91
AegisLab	Trojan.Win32.CryFile.tpdW
GData	Win32.Trojan-Ransom.Filecoder.T
McAfee	Artemis!ACF8562290DB
MAX	malware (ai score=85)
VBA32	Trojan-Ransom.CryFile
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_FILL.A
Yandex	Trojan.CryFile!oFnTf1UmVEE
Ikarus	Trojan.Win32.Filecoder
Fortinet	W32/CryFile.BMY!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Generic.HgIASOcA

How to remove Win32/Filecoder.NOM?

Win32/Filecoder.NOM removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X