What is “MSILHeracles.18009”?

The MSILHeracles.18009 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILHeracles.18009 virus can do?

Anomalous binary characteristics

How to determine MSILHeracles.18009?


File Info:
crc32: B0925EA3
md5: bf045fdaad0ca29aa4413eebd8e48430
name: BF045FDAAD0CA29AA4413EEBD8E48430.mlw
sha1: 3aa8113b2a014a63fc40d4e2ed63cadc867b5489
sha256: 6954910cd3e4b711d536847b33323a6d36f162e45075f946a77faf7756123636
sha512: 803a366b539c364300876860a1b34f61151a4c334ef80ca961a7ad8cbd9fbb478d3b3fff061de7bbdc03e8706b99243b3c901bb1d9f038b96b2b4170ff89e244
ssdeep: 768:MJPWoa0jk5r2uiXvwCB0Or46SWYJqJ3NrWVVf5tTRTE:KbrsOr46SWYJqJ30V7RTE
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: Windows Defender.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: Anti Virus Solution
ProductName: Microsoft Windows Defender
ProductVersion: 1.0.0.0
FileDescription: Microsoft Windows Defender
OriginalFilename: Windows Defender.exe

MSILHeracles.18009 also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.Bulz.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
ALYac	Gen:Variant.MSILHeracles.18009
Cylance	Unsafe
Sangfor	Backdoor.Win32.Bladabindi.ml
CrowdStrike	win/malicious_confidence_60% (W)
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.b2a014
Cyren	W32/Trojan.RCCU-7367
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Kaspersky	Trojan.Win32.Agent.xakngi
BitDefender	Gen:Variant.MSILHeracles.18009
MicroWorld-eScan	Gen:Variant.MSILHeracles.18009
Ad-Aware	Gen:Variant.MSILHeracles.18009
Sophos	Mal/Generic-S
Comodo	Malware@#12700xgdb0jze
BitDefenderTheta	Gen:NN.ZemsilF.34236.em0@aGwaVOb
TrendMicro	TROJ_GEN.R067C0PFG21
McAfee-GW-Edition	GenericRXOV-RG!BF045FDAAD0C
FireEye	Generic.mg.bf045fdaad0ca29a
Emsisoft	Gen:Variant.MSILHeracles.18009 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSILHeracles.j
Microsoft	Trojan:Win32/Tiggre!rfn
GData	Gen:Variant.MSILHeracles.18009
AhnLab-V3	Trojan/Win.Generic.R424658
McAfee	GenericRXOV-RG!BF045FDAAD0C
MAX	malware (ai score=81)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R067C0PFG21
MaxSecure	Trojan.Malware.118907384.susgen
Fortinet	Malicious_Behavior.SB
AVG	Win32:TrojanX-gen [Trj]

How to remove MSILHeracles.18009?

MSILHeracles.18009 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X