Malware

Generic.MSIL.PasswordStealerA.0F6BB454 (file analysis)

Malware Removal

The Generic.MSIL.PasswordStealerA.0F6BB454 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Generic.MSIL.PasswordStealerA.0F6BB454 virus can do?

  • Network activity detected but not expressed in API logs

How to determine Generic.MSIL.PasswordStealerA.0F6BB454?



File Info:

crc32: 171609CE
md5: eb918d031cdbfcec589cd6355598b72e
name: EB918D031CDBFCEC589CD6355598B72E.mlw
sha1: 84b07502f957ea2cb95c7d022d640e1d26a81d43
sha256: 8be3c7231a1d547531c3e669d380fd00b5b3e773da201b34bed04810062329c0
sha512: c6876f807eb54af8b4786dd9e7dcc1a913dfb7bec41fa1c5562965d712b15d998da71de4be35b3040ed190d64f0bbc40ec783c50f29d9a0163ac55a641b271f5
ssdeep: 6144:dTEgdc0YWX7IxUpGREWQ8dvdTED/K+DkQfocE4Ob8F9qfncTR3o:dTEgdfY3xUiWJDkopQncdo
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: ~~~
Assembly Version: 0.0.0.1
InternalName: ~~~
FileVersion: 0.0.0.1
CompanyName: ~~~
LegalTrademarks: ~~~
Comments: 
ProductName: HD1
ProductVersion: 0.0.0.1
FileDescription: ~~~
OriginalFilename: ~~~

Generic.MSIL.PasswordStealerA.0F6BB454 also known as:

K7AntiVirusTrojan ( 0056b6611 )
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop13.10660
CynetMalicious (score: 99)
CAT-QuickHealTrojan.MsilFC.S15413537
ALYacGeneric.MSIL.PasswordStealerA.0F6BB454
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
K7GWTrojan ( 0056b6611 )
Cybereasonmalicious.31cdbf
CyrenW32/MSIL_Kryptik.DOD.gen!Eldorado
ESET-NOD32a variant of MSIL/Agent.BPH
APEXMalicious
AvastWin32:RATX-gen [Trj]
ClamAVWin.Packed.Downeks-6898097-0
KasperskyHEUR:Trojan.MSIL.Quasar.gen
BitDefenderGeneric.MSIL.PasswordStealerA.0F6BB454
MicroWorld-eScanGeneric.MSIL.PasswordStealerA.0F6BB454
Ad-AwareGeneric.MSIL.PasswordStealerA.0F6BB454
SophosML/PE-A
BitDefenderThetaGen:NN.ZemsilF.34758.Fm0@aSiJp6o
TrendMicroTSPY_TINCLEX.SM1
McAfee-GW-EditionGenericRXKX-GN!EB918D031CDB
FireEyeGeneric.mg.eb918d031cdbfcec
EmsisoftGeneric.MSIL.PasswordStealerA.0F6BB454 (B)
JiangminTrojan.MSIL.oyqd
AviraHEUR/AGEN.1135947
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.30A1445
MicrosoftBackdoor:MSIL/Quasar.GG!MTB
GDataMSIL.Backdoor.Quasar.B
AhnLab-V3Backdoor/Win32.QuasarRAT.R341693
McAfeeGenericRXKX-GN!EB918D031CDB
MAXmalware (ai score=81)
VBA32TScope.Trojan.MSIL
MalwarebytesBackdoor.Quasar
TrendMicro-HouseCallTSPY_TINCLEX.SM1
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Agent.BPH!tr
AVGWin32:RATX-gen [Trj]

How to remove Generic.MSIL.PasswordStealerA.0F6BB454?

Generic.MSIL.PasswordStealerA.0F6BB454 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment