Malware

What is “Win32/Filecoder.NPC”?

Malware Removal

The Win32/Filecoder.NPC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Filecoder.NPC virus can do?

  • Anomalous binary characteristics

How to determine Win32/Filecoder.NPC?


File Info:

crc32: A2DE63A6
md5: 133deb9f02db970a9a04bf44dfdb98b4
name: 133DEB9F02DB970A9A04BF44DFDB98B4.mlw
sha1: 4a6e1aaa12872f60574af01909cb063394318ec6
sha256: 667aa79a6e84332f441a8d5b0f76b83170c673fb6d1c2119c2761b49b9ab42df
sha512: c65209dd0333ae243de5dded2493bbbc2acd07eab6bc2b984a2c3fe52451bb15ef720fb46964bd01e26518a01f45c70312ae22101ad980d1eb3a25e363435bf1
ssdeep: 12288:WdqAQB6FnOdUjDN+Zc7EYcsY2+otHherpmiZlbdOwwqenk/wm:zD01OdUkZc7EYcsY2+otopmuBlGk/
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Win32/Filecoder.NPC also known as:

K7AntiVirusTrojan ( 005246351 )
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader26.11484
CynetMalicious (score: 85)
ALYacTrojan.Ransom.Velso
CylanceUnsafe
ZillyaTrojan.CryFile.Win32.264
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/CryFile.5401bbda
K7GWTrojan ( 005246351 )
Cybereasonmalicious.f02db9
ESET-NOD32a variant of Win32/Filecoder.NPC
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Trojan.Velso-6430563-0
KasperskyTrojan-Ransom.Win32.CryFile.bmz
BitDefenderTrojan.Ransom.GenericKD.12791044
NANO-AntivirusTrojan.Win32.FileCoder.exkhab
MicroWorld-eScanTrojan.Ransom.GenericKD.12791044
TencentWin32.Trojan.Cryfile.Dvgf
Ad-AwareTrojan.Ransom.GenericKD.12791044
SophosMal/Generic-R + Troj/Ransom-EVT
BitDefenderThetaGen:NN.ZexaF.34628.YGW@aOF@EJj
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_VCRYPT.QGA
McAfee-GW-EditionGeneric.dwc
FireEyeTrojan.Ransom.GenericKD.12791044
EmsisoftTrojan.FileCoder (A)
JiangminTrojan.CryFile.ep
WebrootW32.Ransom.Rdp
AviraTR/FileCoder.hochw
MicrosoftTrojan:Win32/Occamy.B
ArcabitTrojan.Ransom.Generic.DC32D04
AegisLabTrojan.Win32.Encoder.tqLt
GDataWin32.Trojan-Ransom.Velso.A
AhnLab-V3Trojan/Win32.FileCoder.C2404833
McAfeeGeneric.dwc
MAXmalware (ai score=100)
VBA32Trojan.Downloader
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_VCRYPT.QGA
RisingTrojan.Win32.Ransom.cd (CLOUD)
YandexTrojan.GenAsa!zmlUfU3+Jrs
IkarusTrojan-Ransom.FileCrypter
FortinetW32/Filecoder.NPC!tr.ransom
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Filecoder.HgIASOkA

How to remove Win32/Filecoder.NPC?

Win32/Filecoder.NPC removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment