About “Win32/Filecoder.Phobos.E” infection

The Win32/Filecoder.Phobos.E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Filecoder.Phobos.E virus can do?

Collects information to fingerprint the system

How to determine Win32/Filecoder.Phobos.E?


File Info:
crc32: 1BFBA95E
md5: ed8332805ff1b271a95a782904e0f2a3
name: ED8332805FF1B271A95A782904E0F2A3.mlw
sha1: 662fa2e18fb3e613374c7022e6d63b2354815b84
sha256: e6165b2ea7f2b783ab6f2b1d00069d8c78af86448030dff988f3380550b2707c
sha512: 6f41b159776489220d905098eac784f1952fd14720b2d33515bf963e28218850522d22eda0d9eb3533fe58f276787cfc793bbf33ea054920ae059fc9cac761cc
ssdeep: 768:onCoqNOYoI0VxEw1+Si/TMGy5gQfyZIltCxGOyY96eRXMD1KtQ2iZXVXnkmDoaV:oCNOYon2w1mTMGy5gDqtm96eRbiZXVf
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/Filecoder.Phobos.E also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.599308
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
Cybereason	malicious.05ff1b
ESET-NOD32	a variant of Win32/Filecoder.Phobos.E
APEX	Malicious
Avast	Win32:RansomX-gen [Ransom]
ClamAV	Win.Ransomware.Razy-9760848-0
Kaspersky	HEUR:Trojan-Ransom.Win32.Cryptor.vho
BitDefender	Gen:Variant.Razy.599308
NANO-Antivirus	Trojan.Win32.Cryptor.ijbfwo
MicroWorld-eScan	Gen:Variant.Razy.599308
Ad-Aware	Gen:Variant.Razy.599308
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZexaF.34608.cuW@a0U9wOi
TrendMicro	Ransom.Win32.MAKOP.SM
McAfee-GW-Edition	BehavesLike.Win32.Generic.ph
FireEye	Generic.mg.ed8332805ff1b271
Emsisoft	Gen:Variant.Razy.599308 (B)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1102422
eGambit	Unsafe.AI_Score_57%
Microsoft	Ransom:Win32/Phobos.PB!MTB
Arcabit	Trojan.Razy.D9250C
GData	Gen:Variant.Razy.599308
AhnLab-V3	Malware/Win32.Generic.C4044763
McAfee	GenericRXKO-YC!ED8332805FF1
MAX	malware (ai score=86)
VBA32	BScope.TrojanSpy.Zbot
Malwarebytes	Ransom.Makop
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom.Win32.MAKOP.SM
Rising	Ransom.Phobos!1.D2FA (RDMK:cmRtazqjalLl835NF3Po1dM/i+kZ)
Ikarus	Trojan-Ransom.Phobos
Fortinet	W32/Phobos.E!tr.ransom
AVG	Win32:RansomX-gen [Ransom]
Qihoo-360	HEUR/QVM20.1.DA63.Malware.Gen

How to remove Win32/Filecoder.Phobos.E?

Win32/Filecoder.Phobos.E removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X