Should I remove “MSILHeracles.111875”?

The MSILHeracles.111875 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILHeracles.111875 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
CAPE extracted potentially suspicious content

How to determine MSILHeracles.111875?


File Info:
name: 6AB5F4EE134450C8CC63.mlw
path: /opt/CAPEv2/storage/binaries/a1b0d38c755f8f9f2d92aa1b3b8ff7cc5413e033508e17290e1c5d48580f9cea
crc32: AA456507
md5: 6ab5f4ee134450c8cc633cad24ba564a
sha1: d595e614af1b55b7c4f9a161127f56850c76dbf6
sha256: a1b0d38c755f8f9f2d92aa1b3b8ff7cc5413e033508e17290e1c5d48580f9cea
sha512: abd8105498d05ed73ed9b91143af13d0e22dc4535e02ddc9de9c26d912f1153009d6bff93d6c21040bed8d04997d72e477fe9dca85f87ddb4dcd864b607c6009
ssdeep: 768:0OKDJZgA78uMoFf1qISq7HGTQcLfjgp2Wm41uPcBpNUFkzbE0t0CIfdX:YD0A7ioF9Olfjg91aMpNUFkzbLt0C4dX
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T17B33394173F84523CABE9EF85DB157444B76BA83AA33D79C0C98408E19F6B058B11BB3
sha3_384: 224341913c3918ef12c902e1da6adb6a5a0319b2615f2f676ca5821a042d80931ead9806dadd7375fa8a347a028c502f
ep_bytes: ff250020400000000000000000000000
timestamp: 2016-03-29 02:38:46

Version Info:
Translation: 0x0000 0x04b0
CompanyName: IACJ
FileDescription: FISTools
FileVersion: 2.5.1.6
InternalName: FISTools.dll
LegalCopyright: Copyright © IACJ 2007
OriginalFilename: FISTools.dll
ProductName: FISTools
ProductVersion: 2.5.1.6
Assembly Version: 2.5.1.6

MSILHeracles.111875 also known as:

Lionic	Trojan.Win32.Generic.4!c
AVG	FileRepMalware [Misc]
MicroWorld-eScan	Gen:Variant.MSILHeracles.111875
FireEye	Gen:Variant.MSILHeracles.111875
Skyhigh	Artemis!Trojan
McAfee	Artemis!6AB5F4EE1344
K7AntiVirus	Trojan ( 005957391 )
K7GW	Trojan ( 005957391 )
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/GenCBL.CJH
BitDefender	Gen:Variant.MSILHeracles.111875
Avast	FileRepMalware [Misc]
Rising	Trojan.MalCert!1.E0C6 (CLASSIC)
Sophos	Mal/BadCert-Gen
DrWeb	Trojan.DownLoad4.15026
VIPRE	Gen:Variant.MSILHeracles.111875
Emsisoft	MalCert-S.PR (A)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.MSILHeracles.D1B503
GData	Gen:Variant.MSILHeracles.111875
Google	Detected
MAX	malware (ai score=84)
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H09IH23
Ikarus	Trojan.Win32.Generic
DeepInstinct	MALICIOUS

How to remove MSILHeracles.111875?

MSILHeracles.111875 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X