Generic.MSIL.PasswordStealerA.3508B7CD removal guide

The Generic.MSIL.PasswordStealerA.3508B7CD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.MSIL.PasswordStealerA.3508B7CD virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic.MSIL.PasswordStealerA.3508B7CD?


File Info:
crc32: 8E5EA6EF
md5: 326c5240a72702d4a4f0732196b9466b
name: 2.exe
sha1: 5d9488240dfc0869b006c4ac68b9d7e88febd125
sha256: 5df2b43ac1ee6d8dbcb39ac6cca9a1306369b4db509b2b7a912d3fa44b32021f
sha512: c7426d568fc8d2725b2a6b46ed5141085bac0b88b3dc8924993f5eeb6707895cfc16a1caa285dbf8a3d4b9345f5a0d709d289bb8257cded48bdd8a04123a1650
ssdeep: 24576:W+a4MROxnFf32z8rrcI0AilFEvxHPJoo1:WuMidnrrcI0AilFEvxHP
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: 
Assembly Version: 1.0.0.0
InternalName: Orcus.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 1.0.0.0
FileDescription: 
OriginalFilename: Orcus.exe

Generic.MSIL.PasswordStealerA.3508B7CD also known as:

MicroWorld-eScan	Generic.MSIL.PasswordStealerA.3508B7CD
CAT-QuickHeal	Trojan.MsilFC.S6051223
McAfee	BackDoor-FDJE!326C5240A727
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan ( 005011a81 )
BitDefender	Generic.MSIL.PasswordStealerA.3508B7CD
K7GW	Trojan ( 005011a81 )
Cybereason	malicious.0a7270
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZemsilF.34104.4m0@a4wHLhk
F-Prot	W32/MSIL_Injector.KK.gen!Eldorado
ESET-NOD32	a variant of MSIL/Orcusrat.D
APEX	Malicious
Avast	Win32:CrypterX-gen [Trj]
ClamAV	Win.Packed.Razy-6847895-0
GData	MSIL.Backdoor.Orcus.A
Kaspersky	HEUR:Trojan-Spy.MSIL.Generic
Alibaba	Malware:Win32/Dorpal.ali1000029
ViRobot	Trojan.Win32.Z.Orcusrat.931840.J
Rising	Backdoor.Orcus!1.BABC (CLOUD)
Endgame	malicious (high confidence)
Emsisoft	Backdoor.Orcus (A)
Comodo	Malware@#3n2nyznpuiz5l
F-Secure	Heuristic.HEUR/AGEN.1013795
DrWeb	Trojan.DownLoader24.57377
Zillya	Trojan.Orcusrat.Win32.217
TrendMicro	BKDR_ORCUSRAT.SM
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.326c5240a72702d4
Sophos	Troj/Orcusrot-A
Ikarus	Trojan.MSIL.Agent
Cyren	W32/MSIL_Injector.KK.gen!Eldorado
Jiangmin	TrojanSpy.MSIL.sam
eGambit	Unsafe.AI_Score_99%
Avira	HEUR/AGEN.1013795
MAX	malware (ai score=85)
Microsoft	Backdoor:MSIL/Orcus.A!bit
Arcabit	Generic.MSIL.PasswordStealerA.3508B7CD
SUPERAntiSpyware	Trojan.Agent/Gen-Injector
AhnLab-V3	Win-Trojan/OrcusRAT.Exp
ZoneAlarm	HEUR:Trojan-Spy.MSIL.Generic
VBA32	Trojan.Downloader
ALYac	Generic.MSIL.PasswordStealerA.3508B7CD
Ad-Aware	Generic.MSIL.PasswordStealerA.3508B7CD
Malwarebytes	Backdoor.Orcus
Panda	Trj/CI.A
TrendMicro-HouseCall	BKDR_ORCUSRAT.SM
Tencent	Msil.Trojan-spy.Generic.Lhxc
Yandex	Trojan.Orcusrat!
SentinelOne	DFI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Generic.AP.F529E!tr
AVG	Win32:CrypterX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Trojan.Generic

How to remove Generic.MSIL.PasswordStealerA.3508B7CD?

Generic.MSIL.PasswordStealerA.3508B7CD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generic.MSIL.PasswordStealerA.3508B7CD removal guide