Malware

Generic.MSIL.PasswordStealerA.3A8173A0 removal tips

Malware Removal

The Generic.MSIL.PasswordStealerA.3A8173A0 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Generic.MSIL.PasswordStealerA.3A8173A0 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Generic.MSIL.PasswordStealerA.3A8173A0?



File Info:

crc32: B136CA78
md5: 60f75f3f9255307c65a56ad10d14c79c
name: 60F75F3F9255307C65A56AD10D14C79C.mlw
sha1: 8eea51686ab6f338b13011adc4ccd724238daac1
sha256: 83ee132d4ae14e9a0963af00c2a937d70da63d696bfbbcbc4e1b5d976beeb4a7
sha512: 8e2a9f9484abfcc075ddb9e20305e0e9ef612b365570713b09ba3882e52e9b790f998958898a73b19baff5ec0b759faedce431b53e4fd9c1aec7095735e7ddfa
ssdeep: 24576:Ehf4MROxnFD3Iw8XlrrcI0AilFEvxHPxKooJ:ESMiJkrrcI0AilFEvxHP
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: SwiftSoft LLC
Assembly Version: 1.0.0.0
InternalName: ExLoader
FileVersion: 2.5.26.0
CompanyName: SwiftSoft LLC
LegalTrademarks: ExLoader
Comments: 
ProductName: ExLoader
ProductVersion: 2.5.26.0
FileDescription: Unified library of game modifications
OriginalFilename: Orcus.exe

Generic.MSIL.PasswordStealerA.3A8173A0 also known as:

K7AntiVirusTrojan ( 005011a81 )
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader24.57377
CynetMalicious (score: 100)
CAT-QuickHealTrojan.MsilFC.S6051223
ALYacGeneric.MSIL.PasswordStealerA.3A8173A0
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 005011a81 )
Cybereasonmalicious.f92553
CyrenW32/Orcus.A.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Orcusrat.D
APEXMalicious
AvastWin32:CrypterX-gen [Trj]
ClamAVWin.Packed.Passwordstealera-9752380-0
KasperskyHEUR:Trojan-Spy.MSIL.Generic
BitDefenderGeneric.MSIL.PasswordStealerA.3A8173A0
MicroWorld-eScanGeneric.MSIL.PasswordStealerA.3A8173A0
Ad-AwareGeneric.MSIL.PasswordStealerA.3A8173A0
SophosML/PE-A + Troj/OrcusRAT-A
BitDefenderThetaGen:NN.ZemsilF.34744.5m0@auCPCLf
TrendMicroBKDR_ORCUSRAT.SM
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
FireEyeGeneric.mg.60f75f3f9255307c
EmsisoftGeneric.MSIL.PasswordStealerA.3A8173A0 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanSpy.MSIL.sam
AviraHEUR/AGEN.1128549
MicrosoftBackdoor:MSIL/Orcus.A!bit
ArcabitGeneric.MSIL.PasswordStealerA.3A8173A0
GDataMSIL.Backdoor.Orcus.A
AhnLab-V3Win-Trojan/OrcusRAT.Exp
McAfeeBackDoor-FDJE!60F75F3F9255
MAXmalware (ai score=88)
VBA32Trojan.Downloader
MalwarebytesQbot.Backdoor.Stealer.DDS
TrendMicro-HouseCallBKDR_ORCUSRAT.SM
RisingBackdoor.Orcus!1.BABC (CLASSIC)
IkarusTrojan.MSIL.Orcusrat
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Agent.ASJ!tr
AVGWin32:CrypterX-gen [Trj]

How to remove Generic.MSIL.PasswordStealerA.3A8173A0?

Generic.MSIL.PasswordStealerA.3A8173A0 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment