Malware

How to remove “Generic.MSIL.PasswordStealerA.B56D3102”?

Malware Removal

The Generic.MSIL.PasswordStealerA.B56D3102 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Generic.MSIL.PasswordStealerA.B56D3102 virus can do?

  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid
  • CAPE detected the BotSh1zoid malware family
  • Binary compilation timestomping detected

How to determine Generic.MSIL.PasswordStealerA.B56D3102?



File Info:

name: 726F629874E09B991AF6.mlw
path: /opt/CAPEv2/storage/binaries/3bcfc447782536cb196b61d9093537d8a96ddb42ae27534d46d99536c0262cfb
crc32: 6ADA9835
md5: 726f629874e09b991af6288070ac755f
sha1: f3535f00a065be3f25b57ef79120326fccc97e94
sha256: 3bcfc447782536cb196b61d9093537d8a96ddb42ae27534d46d99536c0262cfb
sha512: 35dcd314958afa736e77634027a4dd793e72c524f6b2fe8c9ea9739b81020c606b0ac621c6f64f545b90a52bfb88bbd2c625b9a1fc321694d7b47e307cc82773
ssdeep: 49152:3tMjfGZK7avSzz6GrymtbQz4gftdky4b5HIkvfqO:9MKZK7aazzprymtIno
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T139D54A1437F81E23D1BE96B281B0515297F0FC29B363EBAB2581A7799C13F506D422B7
sha3_384: af57f974178333015d57bea615fd0b27b6f12d0a41c44909a2ae8ab3d4999debc2ee9a5742e90c8b45284bfa505c72d1
ep_bytes: ff250020400000000000b71dc1046e3b
timestamp: 2039-09-20 02:20:35


Version Info:

Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: gosgo
FileVersion: 1.0.0.0
InternalName: ReadLineS0SAT.exe
LegalCopyright: Copyright ©  2020
LegalTrademarks: 
OriginalFilename: ReadLineS0SAT.exe
ProductName: sgsf
ProductVersion: 1.0.0.0
Assembly Version: 1.1.1.0

Generic.MSIL.PasswordStealerA.B56D3102 also known as:

MicroWorld-eScanDeepScan:Generic.MSIL.PasswordStealerA.B56D3102
ALYacDeepScan:Generic.MSIL.PasswordStealerA.B56D3102
CylanceUnsafe
Cybereasonmalicious.874e09
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Spy.Agent.AES
APEXMalicious
ClamAVWin.Packed.Passwordstealera-6872839-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderDeepScan:Generic.MSIL.PasswordStealerA.B56D3102
AvastFileRepMalware
Ad-AwareDeepScan:Generic.MSIL.PasswordStealerA.B56D3102
DrWebTrojan.PWS.StealerNET.74
TrendMicroTrojan.MSIL.REDLINESTEALER.SMTH
FireEyeGeneric.mg.726f629874e09b99
EmsisoftDeepScan:Generic.MSIL.PasswordStealerA.B56D3102 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.MSIL.unas
AviraTR/Spy.Agent.pgzgt
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataDeepScan:Generic.MSIL.PasswordStealerA.B56D3102
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.C4780202
McAfeeGenericRXQU-LU!726F629874E0
MAXmalware (ai score=87)
VBA32Malware-Cryptor.MSIL.AgentTesla.Heur
MalwarebytesSpyware.PasswordStealer
RisingStealer.Agent!1.D483 (CLASSIC)
eGambitTrojan.Generic
AVGFileRepMalware
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_60% (W)
MaxSecureTrojan.Malware.121218.susgen

How to remove Generic.MSIL.PasswordStealerA.B56D3102?

Generic.MSIL.PasswordStealerA.B56D3102 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment