Malware

Generic.MSIL.PasswordStealerA.DB104F17 removal guide

Malware Removal

The Generic.MSIL.PasswordStealerA.DB104F17 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.MSIL.PasswordStealerA.DB104F17 virus can do?

  • Network activity detected but not expressed in API logs

How to determine Generic.MSIL.PasswordStealerA.DB104F17?


File Info:

crc32: 2B3D93A7
md5: b6ab9db1c2c1e606268a6f613cfcdf3d
name: B6AB9DB1C2C1E606268A6F613CFCDF3D.mlw
sha1: 031eafa5dd67d5c832a05adb64348cc03e8e5132
sha256: f4070df8414261f9d218626189c7d3c303457fc6ea442ea413a42131f57cca21
sha512: 1c1a9bf6fe965ba42d80c57281a21edf8c932e8b40049a5e7059ccee679fa797662b905aa02d2c9d9d6bb8d9333f76efd300e4666496ebd1d0db3676b3a748c6
ssdeep: 6144:fvqQ4i1FFiEKKWDTzfkNqbCXlhN14KfrBF9dlldKePawhX:HplinTzMNLXlhL1F9/ltawhX
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Microsoft
Assembly Version: 1.0.0.0
InternalName: Audio.exe
FileVersion: 1.0.0.0
CompanyName: Microsoft
LegalTrademarks: Microsoft
Comments:
ProductName: Audio Driver
ProductVersion: 1.0.0.0
FileDescription: Realtek Audio Driver
OriginalFilename: Audio.exe

Generic.MSIL.PasswordStealerA.DB104F17 also known as:

K7AntiVirusTrojan ( 00521dab1 )
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader27.59888
CynetMalicious (score: 100)
CAT-QuickHealTrojan.MsilFC.S19436557
ALYacGeneric.MSIL.PasswordStealerA.DB104F17
CylanceUnsafe
SangforWin.Malware.Generic-6623004-0
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaBackdoor:MSIL/Quasar.eed242fa
K7GWTrojan ( 00521dab1 )
Cybereasonmalicious.1c2c1e
CyrenW32/MSIL_Mintluks.A.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32MSIL/Spy.Agent.AES
APEXMalicious
AvastMSIL:Rat-B [Trj]
ClamAVWin.Trojan.Generic-6295765-0
KasperskyTrojan.MSIL.Agent.foww
BitDefenderGeneric.MSIL.PasswordStealerA.DB104F17
MicroWorld-eScanGeneric.MSIL.PasswordStealerA.DB104F17
TencentMsil.Trojan.Agent.Pgmt
Ad-AwareGeneric.MSIL.PasswordStealerA.DB104F17
SophosML/PE-A + Troj/Subti-A
BitDefenderThetaGen:NN.ZemsilF.34758.vm0@aCrIxak
VIPRETrojan.Win32.Generic!BT
TrendMicroTSPY_TINCLEX.SM1
McAfee-GW-EditionBehavesLike.Win32.Generic.fh
FireEyeGeneric.mg.b6ab9db1c2c1e606
EmsisoftGeneric.MSIL.PasswordStealerA.DB104F17 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.ajfvk
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1135947
eGambitTrojan.Generic
MicrosoftBackdoor:MSIL/Quasar.GG!MTB
ArcabitGeneric.MSIL.PasswordStealerA.DB104F17
AegisLabTrojan.MSIL.Agent.mCnJ
GDataGeneric.MSIL.PasswordStealerA.DB104F17
AhnLab-V3Trojan/Win32.RL_Subti.C4349370
Acronissuspicious
McAfeePWS-FCOI!B6AB9DB1C2C1
MAXmalware (ai score=81)
MalwarebytesGeneric.Trojan.Malicious.DDS
PandaTrj/CI.A
TrendMicro-HouseCallTSPY_TINCLEX.SM1
RisingBackdoor.XRat!1.D01D (CLASSIC)
IkarusTrojan.MSIL.Agent
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Agent.BEU!tr
AVGMSIL:Rat-B [Trj]
Paloaltogeneric.ml

How to remove Generic.MSIL.PasswordStealerA.DB104F17?

Generic.MSIL.PasswordStealerA.DB104F17 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment