Generic.MSIL.PasswordStealerA.0765BC5F (B) (file analysis)

The Generic.MSIL.PasswordStealerA.0765BC5F (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.MSIL.PasswordStealerA.0765BC5F (B) virus can do?

Network activity detected but not expressed in API logs

How to determine Generic.MSIL.PasswordStealerA.0765BC5F (B)?


File Info:
crc32: 4FC7B243
md5: 8bda7653977917f3823305a1da619a5f
name: a.exe
sha1: 6da9fb337ddb6cc18a453ee9982e173d62684f35
sha256: c24a0fa5559d242960e1e7ffc393f394bd9e9eb04e2ec27bd83661fb8e01c342
sha512: 2d47eabb69ae7b054cb8285b6ecc50abdc24661998c6252d24dc04886cdce522947dc4f7651dc144630accf3949db41d24c9c400b88992f45ee2cbd95c4fd105
ssdeep: 6144:hK2J10qdSlEc39HGBBdKrUtjKwjxnxjokOb0d/RJY+DPe00:hKF64U9KOxjVzd5JYae00
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: 
Assembly Version: 1.0.1.1
InternalName: 
FileVersion: 1.0.1.1
CompanyName: 
LegalTrademarks: 
ProductName: 
ProductVersion: 1.0.1.1
FileDescription: 
OriginalFilename:

Generic.MSIL.PasswordStealerA.0765BC5F (B) also known as:

DrWeb	BackDoor.Quasar.1
MicroWorld-eScan	Generic.MSIL.PasswordStealerA.0765BC5F
FireEye	Generic.mg.8bda7653977917f3
CAT-QuickHeal	Trojan.MsilFC.S6053764
ALYac	Generic.MSIL.PasswordStealerA.0765BC5F
Malwarebytes	Trojan.PasswordStealer
Sangfor	Malware
K7AntiVirus	Trojan ( 00521dab1 )
BitDefender	Generic.MSIL.PasswordStealerA.0765BC5F
K7GW	Trojan ( 00521dab1 )
Cybereason	malicious.397791
TrendMicro	TSPY_TINCLEX.SM1
BitDefenderTheta	Gen:NN.ZemsilF.34084.vm0@a0Yj2Dn
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.Generic-6623004-0
Kaspersky	Trojan.MSIL.Agent.foqx
Ad-Aware	Generic.MSIL.PasswordStealerA.0765BC5F
Sophos	Troj/Subti-A
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
Trapmine	malicious.high.ml.score
Emsisoft	Generic.MSIL.PasswordStealerA.0765BC5F (B)
SentinelOne	DFI – Malicious PE
Jiangmin	Trojan.MSIL.nynz
Avira	HEUR/AGEN.1045085
Microsoft	Backdoor:Win32/QuasarRAT.A
Endgame	malicious (high confidence)
Arcabit	Generic.MSIL.PasswordStealerA.0765BC5F
ZoneAlarm	Trojan.MSIL.Agent.foqx
GData	MSIL.Trojan-Spy.Keylogger.J
Acronis	suspicious
McAfee	GenericRXAG-LA!8BDA76539779
MAX	malware (ai score=80)
VBA32	TScope.Trojan.MSIL
ESET-NOD32	a variant of MSIL/Spy.Agent.AES
TrendMicro-HouseCall	TSPY_TINCLEX.SM1
Rising	Backdoor.Quasar!1.B1DD (CLASSIC)
Ikarus	Trojan.MSIL.Spy
eGambit	Trojan.Generic
Fortinet	MSIL/Agent.AES!tr
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	HEUR/QVM03.0.F493.Malware.Gen

How to remove Generic.MSIL.PasswordStealerA.0765BC5F (B)?

Generic.MSIL.PasswordStealerA.0765BC5F (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X