Should I remove “Win32/Filecoder.WannaCryptor.I”?

The Win32/Filecoder.WannaCryptor.I is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Filecoder.WannaCryptor.I virus can do?

How to determine Win32/Filecoder.WannaCryptor.I?


File Info:
crc32: CCE360E7
md5: b45b630ff9f90fcc6f111cd507cfad3f
name: B45B630FF9F90FCC6F111CD507CFAD3F.mlw
sha1: 86e38a1934b59ba2fa3102a005714b07b13ee79d
sha256: 940a89a5968c18729c8dd7224a256bd32082e235217fb08f180a282d92d0c363
sha512: 7119634db15ed475fe41b7953d9cd10b4eccb290eba7e809920235e79f35d3ef444de66c6b70dbfae8d7e998c1c60458ba9321834af4324b1ea9d4ee066a6bb7
ssdeep: 1536:QhLC09p859GSN9S4A3o8QKw3Gn7Lf0lCtXk:QhLCi4sVQKw2nP0lIXk
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2016
InternalName: Message
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: Message Application
ProductVersion: 1, 0, 0, 1
FileDescription: Message MFC Application
OriginalFilename: Message.EXE
Translation: 0x0409 0x04b0

Win32/Filecoder.WannaCryptor.I also known as:

ALYac	Trojan.Agent.Qkkbal
Cylance	Unsafe
Zillya	Trojan.Filecoder.Win32.17030
Sangfor	Trojan.Win32.Filecoder.8
Alibaba	Ransom:Win32/WannaCryptor.31d97b84
Cybereason	malicious.ff9f90
Symantec	Ransom.Wannacry
ESET-NOD32	Win32/Filecoder.WannaCryptor.I
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Heur.Ransom.REntS.Gen.1
ViRobot	Trojan.Win32.S.Ransom.147456.B
MicroWorld-eScan	Gen:Heur.Ransom.REntS.Gen.1
Tencent	Trojan.Win32.WannaCry.l
Ad-Aware	Gen:Heur.Ransom.REntS.Gen.1
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Heur.Ransom.REntS.Gen.1
Emsisoft	Gen:Heur.Ransom.REntS.Gen.1 (B)
Microsoft	Trojan:Win32/Ymacco.AA94
Arcabit	Trojan.Ransom.REntS.Gen.1
AegisLab	Trojan.Win32.Rents.4!c
GData	Gen:Heur.Ransom.REntS.Gen.1
AhnLab-V3	Trojan/Win32.Ransom.C1961294
McAfee	Artemis!B45B630FF9F9
MAX	malware (ai score=100)
Rising	Trojan.Filecoder!8.68 (CLOUD)
Ikarus	Trojan-Ransom.Wannacryptor
Fortinet	W32/Filecoder_WannaCryptor.I!tr
AVG	Win32:Malware-gen
Qihoo-360	Win32/Trojan.Ransom.b57

How to remove Win32/Filecoder.WannaCryptor.I?

Win32/Filecoder.WannaCryptor.I removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X