Malware

Win64/Filecoder.FONIX.A removal instruction

Malware Removal

The Win64/Filecoder.FONIX.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win64/Filecoder.FONIX.A virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX

How to determine Win64/Filecoder.FONIX.A?


File Info:

crc32: 85DBB09E
md5: 8f99c1ae5a325ecbb3c5a4591bd64cfb
name: 8F99C1AE5A325ECBB3C5A4591BD64CFB.mlw
sha1: aceb67abf5e7607059e6409b2504770a562bf15a
sha256: 0c4506cd0ff46ba90290e583f5e8df63be1cc2468e0899c5cd7b5e651a7c9e25
sha512: a7f67a3492895fd8ef2f774d458e222118af0af430fd6052b403dc35499f99dd0197d6c7c05e78db5cd4b1646c8c3f97f60f043c2a33fc4097ee8226dc559161
ssdeep: 12288:OOqIpZrBQIyBj9eCwXfKFxEyfreqaHwOhR5YlmareE:mg1BCRe3Cr5mbR5Yltr
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:

0: [No Data]

Win64/Filecoder.FONIX.A also known as:

K7AntiVirusTrojan ( 005739e81 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacTrojan.Ransom.Fonix
CylanceUnsafe
ZillyaTrojan.Filecoder.Win64.9365
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/FonixCrypter.e598afb3
K7GWTrojan ( 005739e81 )
Cybereasonmalicious.e5a325
CyrenW64/Trojan.EAMX-0221
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win64/Filecoder.FONIX.A
APEXMalicious
AvastFileRepMalware
KasperskyHEUR:Trojan-Ransom.Win32.Fonix.vho
BitDefenderTrojan.GenericKD.45404893
NANO-AntivirusTrojan.Win64.Fonix.ikixqz
MicroWorld-eScanTrojan.GenericKD.45404893
TencentWin32.Trojan.Fonix.Eerp
Ad-AwareTrojan.GenericKD.45404893
SophosMal/Generic-S
TrendMicroRansom.Win64.FONIX.SMTH
McAfee-GW-EditionBehavesLike.Win64.Trojan.gc
FireEyeGeneric.mg.8f99c1ae5a325ecb
EmsisoftTrojan.GenericKD.45404893 (B)
AviraTR/AD.FonixRansom.wahsk
MicrosoftTrojan:Win32/Ymacco.AA0C
ArcabitTrojan.Generic.D2B4D2DD
AegisLabTrojan.Win32.Mucc.4!c
GDataTrojan.GenericKD.45404893
AhnLab-V3Trojan/Win32.Ransomlock.C4280873
Acronissuspicious
McAfeeArtemis!8F99C1AE5A32
MAXmalware (ai score=100)
VBA32Trojan.Mucc
MalwarebytesRansom.Fonix
PandaTrj/CI.A
RisingTrojan.Filecoder!8.68 (TFE:dGZlOgVxUxy10i3gnQ)
IkarusTrojan-Ransom.Fonix
MaxSecureTrojan.Malware.74692204.susgen
FortinetW32/Mucc.A!tr
AVGFileRepMalware
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Generic.H8oASL8A

How to remove Win64/Filecoder.FONIX.A?

Win64/Filecoder.FONIX.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment