Win32/Filecoder.Sodinokibi.K removal tips

The Win32/Filecoder.Sodinokibi.K is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Filecoder.Sodinokibi.K virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Network activity detected but not expressed in API logs

How to determine Win32/Filecoder.Sodinokibi.K?


File Info:
crc32: B8F02898
md5: 040818b1b3c9b1bf8245f5bcb4eebbbc
name: 040818B1B3C9B1BF8245F5BCB4EEBBBC.mlw
sha1: c0f569fc22cb5dd8e02e44f85168b4b72a6669c3
sha256: 0496ca57e387b10dfdac809de8a4e039f68e8d66535d5d19ec76d39f7d0a4402
sha512: bf4dcfb3c7cac05776560e751414a8babfa25fb8703768d0264133d4964f841055cfcab9f30d9854e422642855b4452b9fbf431889cb70a37ecbca7564f638c1
ssdeep: 24576:sxskD1HtqZ+p53DVJ3Bpv256HDtMTeWDqQW:md2+Pf28SR3W
type: PE32 executable (DLL) (console) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/Filecoder.Sodinokibi.K also known as:

ALYac	Trojan.Ransom.Sodinokibi
Malwarebytes	Ransom.Sodinokibi
Sangfor	Ransom.Win32.Sodin.gen
Alibaba	Ransom:Win32/Sodinokibi.498ebb24
K7GW	Trojan ( 0057beee1 )
K7AntiVirus	Trojan ( 0057beee1 )
Symantec	Trojan.Gen.2
ESET-NOD32	Win32/Filecoder.Sodinokibi.K
Avast	Win32:DangerousSig [Trj]
Kaspersky	HEUR:Trojan-Ransom.Win32.Sodin.gen
BitDefender	Gen:Variant.Doina.11604
MicroWorld-eScan	Gen:Variant.Doina.11604
Ad-Aware	Gen:Variant.Doina.11604
Comodo	TrojWare.Win32.UMal.ldvhs@0
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom.Win32.SODINOKIBI.YABEDA
McAfee-GW-Edition	Ransomware-sodinokibi.a
FireEye	Gen:Variant.Doina.11604
Emsisoft	MalCert.A (A)
Webroot	W32.Ransom.Sodinokibi
Avira	TR/Ransom.Sodinokibi.ufzkr
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Ransom:MacOS/Filecoder
AegisLab	Trojan.Win32.Sodin.j!c
GData	Win32.Trojan.Agent.HFJA90
AhnLab-V3	Ransomware/Win.SODINOKIBI.C4452860
McAfee	Artemis!040818B1B3C9
MAX	malware (ai score=83)
VBA32	TrojanRansom.Sodin
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom.Win32.SODINOKIBI.YABEDA
Rising	Ransom.Sodin!8.10CD8 (CLOUD)
Ikarus	Trojan-Ransom.Sodinokibi
Fortinet	W32/Sodin!tr
AVG	Win32:DangerousSig [Trj]
Paloalto	generic.ml

How to remove Win32/Filecoder.Sodinokibi.K?

Win32/Filecoder.Sodinokibi.K removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X