MSIL/PSW.Discord.AIW removal tips

The MSIL/PSW.Discord.AIW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/PSW.Discord.AIW virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine MSIL/PSW.Discord.AIW?


File Info:
name: 3563537A9270DC692D2B.mlw
path: /opt/CAPEv2/storage/binaries/eb1d62bc2f31e9e7964332df50db0aef496bcbe192796b14d660b17b2d76fd4b
crc32: 6C700278
md5: 3563537a9270dc692d2b24a352ed7d61
sha1: fbe2a72648b533ee343ee9cc47d6ac0d5749d03c
sha256: eb1d62bc2f31e9e7964332df50db0aef496bcbe192796b14d660b17b2d76fd4b
sha512: 9b9c4e380d6257951fec35cf3ffbc5dcacfa0f2d59646fe8bae30376bc86cf38c6f72d50ed4235f5bc09ef73982149f11b4b34873bd5af01959c704c4d88f66c
ssdeep: 384:nG327yMrjgJygadFh6g4hhobE/qrhGOg4jHpOHY:GG2zqdb6gXeY
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D052B441FBF99254F6FBCEBC2DF352604AB5BA451828DE9E18B8414E4C32B044DA2777
sha3_384: 223a7c59a7fecc687539d4ef46914e80653f9e4b9613dcf4256fa15e29ace508b5e96d17f413b8aa0b73c9cde51610e3
ep_bytes: ff250020400000000000000000000000
timestamp: 2097-09-02 19:00:44

Version Info:
Translation: 0x0000 0x04b0
CompanyName: spoofer
FileDescription: spoofer
FileVersion: 1.0.0.0
InternalName: spoofer.dll
LegalCopyright:  
OriginalFilename: spoofer.dll
ProductName: spoofer
ProductVersion: 1.0.0
Assembly Version: 1.0.0.0

MSIL/PSW.Discord.AIW also known as:

Bkav	W32.AIDetectNet.01
Lionic	Trojan.MSIL.Disco.i!c
MicroWorld-eScan	Trojan.GenericKD.39627402
FireEye	Trojan.GenericKD.39627402
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (W)
BitDefenderTheta	Gen:NN.ZemsilF.34638.am0@aGiAcHg
Cyren	W32/MSIL_Discord.F.gen!Eldorado
ESET-NOD32	MSIL/PSW.Discord.AIW
Kaspersky	HEUR:Trojan-PSW.MSIL.Disco.gen
BitDefender	Trojan.GenericKD.39627402
Avast	Win32:Malware-gen
Tencent	Trojan.Win32.Polyransom.yb
Ad-Aware	Trojan.GenericKD.39627402
Emsisoft	Trojan.GenericKD.39627402 (B)
McAfee-GW-Edition	Artemis
SentinelOne	Static AI – Suspicious PE
GData	Trojan.GenericKD.39627402
Avira	HEUR/AGEN.1241031
Arcabit	Trojan.Generic.D25CAA8A
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Disco.gen
Cynet	Malicious (score: 99)
McAfee	Artemis!3563537A9270
MAX	malware (ai score=83)
Malwarebytes	Spyware.DiscordStealer.MSIL
TrendMicro-HouseCall	TROJ_GEN.R002H07E922
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Discord.AIW!tr.pws
AVG	Win32:Malware-gen

How to remove MSIL/PSW.Discord.AIW?

MSIL/PSW.Discord.AIW removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X