Categories: Malware

Should I remove “Generic.MSIL.PasswordStealerA.D194D129”?

The Generic.MSIL.PasswordStealerA.D194D129 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.MSIL.PasswordStealerA.D194D129 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the QuasarRAT malware family

How to determine Generic.MSIL.PasswordStealerA.D194D129?


File Info:
name: 2D0F2702D9A99FB479E1.mlwpath: /opt/CAPEv2/storage/binaries/ab533d7a16227a7d26dda81b03443dba6c44e2c8cff869b55c0568ab9289db8acrc32: A20E976Fmd5: 2d0f2702d9a99fb479e14d589dc2fc71sha1: 6d941ffc9af7bdb9cc331b442dd9d0a83b03e87asha256: ab533d7a16227a7d26dda81b03443dba6c44e2c8cff869b55c0568ab9289db8asha512: af93783dbc62f6aeb0172cb9ecbfec23fc77ac8791e35784727f818088833e597e21e927db0ab552d40fca6037f15536bb09c445f664405ee19e478132a75f33ssdeep: 3072:ZpG6S4+kP6szsz1dlKJOdTPMYc78oOCMq8smqoKn0YbTaFOoUnxahBsXMKqnGp:ZHJ+W6sz4rlKJOdpcQoYndK0YbCOtjttype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B5347D1023DC872BEAEE077AF8B0410187B8D517F91BE7CB5D84D4F918573A28E916A7sha3_384: 3457e040f2c523e0a58b1593d17dedbe4e10d6b1449efe38451a42916bb5e107b6040e79a0c11d73157d2e75313d6959ep_bytes: ff250020400000000000000000000000timestamp: 2023-10-04 02:25:53
Version Info:
Translation: 0x0000 0x04b0FileDescription:  FileVersion: 1.1.0.0InternalName: Client.exeLegalCopyright:  OriginalFilename: Client.exeProductVersion: 1.1.0.0Assembly Version: 1.1.0.0

Generic.MSIL.PasswordStealerA.D194D129 also known as:

MicroWorld-eScan	Generic.MSIL.PasswordStealerA.D194D129
CAT-QuickHeal	Trojan.Generic.A3
McAfee	GenericRXFK-YH!2D0F2702D9A9
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Generic.MSIL.PasswordStealerA.D194D129
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 00562f821 )
BitDefender	Generic.MSIL.PasswordStealerA.D194D129
K7GW	Trojan ( 00562f821 )
Cybereason	malicious.c9af7b
VirIT	Trojan.Win32.DownLoader16.GTT
Cyren	W32/MSIL_Mintluks.A.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	Windows.Trojan.Quasarrat
ESET-NOD32	a variant of MSIL/Spy.Agent.AES
APEX	Malicious
ClamAV	Win.Packed.Generic-9830106-0
Kaspersky	HEUR:Trojan-Spy.MSIL.Agent.gen
Avast	MSIL:Rat-B [Trj]
Emsisoft	Generic.MSIL.PasswordStealerA.D194D129 (B)
F-Secure	Heuristic.HEUR/AGEN.1305747
DrWeb	Trojan.DownLoader16.4569
Zillya	Trojan.Agent.Win32.624550
TrendMicro	TSPY_TINCLEX.SM
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
FireEye	Generic.mg.2d0f2702d9a99fb4
Sophos	ATK/Zaquar-D
Ikarus	Backdoor.Win32.Xiclog
Jiangmin	Trojan/Reconyc.eye
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1305747
MAX	malware (ai score=84)
Antiy-AVL	Trojan/Win32.AGeneric
Arcabit	Generic.MSIL.PasswordStealerA.D194D129
ZoneAlarm	HEUR:Trojan-Spy.MSIL.Agent.gen
GData	MSIL.Backdoor.Quasar.D
Google	Detected
AhnLab-V3	Malware/Win32.Generic.C978358
BitDefenderTheta	Gen:NN.ZemsilF.36738.pm0@auIflHk
ALYac	Generic.MSIL.PasswordStealerA.D194D129
VBA32	Trojan.MSIL.Quasar.Heur
Cylance	unsafe
TrendMicro-HouseCall	TSPY_TINCLEX.SM
Yandex	Trojan.Agent!IS+E65+nBpM
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.AES!tr
AVG	MSIL:Rat-B [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)