Generic.MSIL.PasswordStealerA.A6DE7AEB information

The Generic.MSIL.PasswordStealerA.A6DE7AEB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.MSIL.PasswordStealerA.A6DE7AEB virus can do?

The binary likely contains encrypted or compressed data.

How to determine Generic.MSIL.PasswordStealerA.A6DE7AEB?


File Info:
crc32: 7133D349
md5: 99cc862a01f73fb6ea3e1cb936a4c04b
name: 99CC862A01F73FB6EA3E1CB936A4C04B.mlw
sha1: 66c10ab29e5501a5cd2b425741eb3ec90de35614
sha256: 6909a279afa2126db43fc7f6cfed4c2bed6d0dbb2ded6e661af6c8ad3e7a0b6f
sha512: ad942e4b4c6c128f3d040df71bfc6d410703d1ba812e168ff9e5a920c735b4340c513860132d31b06a0b6a07f86419e9804b7a088f84ae47d676a8deddd28573
ssdeep: 24576:9y6uoEsOUSyruiSn1a105abaw767YEkURjykzrXxCOmoGnA:Y6OvUbdZ10iaw768Ty7/xC7oG
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: Wextract                
FileVersion: 11.00.10240.16384 (th1.150709-1700)
CompanyName: Microsoft Corporation
ProductName: Internet Explorer
ProductVersion: 11.00.10240.16384
FileDescription: Win32 Cabinet Self-Extractor                                           
OriginalFilename: WEXTRACT.EXE            .MUI
Translation: 0x0409 0x04b0

Generic.MSIL.PasswordStealerA.A6DE7AEB also known as:

K7AntiVirus	Trojan ( 00521dab1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader27.59888
Cynet	Malicious (score: 85)
ALYac	Generic.MSIL.PasswordStealerA.A6DE7AEB
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	Backdoor:MSIL/Quasar.4a70f9cd
K7GW	Trojan ( 00521dab1 )
Cybereason	malicious.29e550
Cyren	W32/MSIL_Mintluks.A.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Spy.Agent.AES
APEX	Malicious
Avast	MSIL:Rat-B [Trj]
ClamAV	Win.Trojan.Generic-6295765-0
Kaspersky	Trojan.MSIL.Agent.foww
Sophos	ML/PE-A
TrendMicro	TSPY_TINCLEX.SM1
McAfee-GW-Edition	BehavesLike.Win64.Expiro.tc
SentinelOne	Static AI – Malicious SFX
Avira	HEUR/AGEN.1135947
eGambit	Trojan.Generic
Microsoft	Backdoor:MSIL/Quasar.GG!MTB
ZoneAlarm	HEUR:Trojan.MSIL.Quasar.gen
GData	Win64.Trojan.Agent.EEWK6Q
McAfee	Artemis!99CC862A01F7
Malwarebytes	Generic.Trojan.Malicious.DDS
TrendMicro-HouseCall	TSPY_TINCLEX.SM1
Rising	Backdoor.XRat!1.D01D (CLASSIC)
Ikarus	Trojan.MSIL.Agent
Fortinet	W32/Agent.AES!tr
AVG	MSIL:Rat-B [Trj]

How to remove Generic.MSIL.PasswordStealerA.A6DE7AEB?

Generic.MSIL.PasswordStealerA.A6DE7AEB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X