MSILHeracles.21422 removal

The MSILHeracles.21422 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILHeracles.21422 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine MSILHeracles.21422?


File Info:
crc32: 497A4C80
md5: ba38c04c7ecd11954fa1d792a07ade1c
name: BA38C04C7ECD11954FA1D792A07ADE1C.mlw
sha1: 42243fc8050ab2623f912a1f521c00928de39929
sha256: 3b9b3d204dd368f9a81593c7881d33222cde4c5e32dce920b7cb425a489dd7bf
sha512: 8fa0c07aa75fe220928e006851cfad553c2809255790894c3ee1ae5bcdbcc5d56121a71b15f869740e529bc9c3a0234a86249dc0fcc3aeaed0530922e7ef99da
ssdeep: 12288:U9QUCGqvzMPMSXSnIHSlkcQSp1MXrw318URM:U9QUYoP5XSnoSlk3kMbw3tM
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2015
Assembly Version: 1.0.0.0
InternalName: x1P5tMJ.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: SpecialPaint
ProductVersion: 1.0.0.0
FileDescription: SpecialPaint
OriginalFilename: x1P5tMJ.exe

MSILHeracles.21422 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen14.37259
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.MSILHeracles.21422
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
Alibaba	Trojan:Win32/Kryptik.ali2000016
Cybereason	malicious.8050ab
Cyren	W32/MSIL_Kryptik.EUF.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Kryptik.ABYO
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefender	Trojan.GenericKDZ.76421
MicroWorld-eScan	Trojan.GenericKDZ.76421
Ad-Aware	Trojan.GenericKDZ.76421
Sophos	Mal/Generic-R + Troj/Kryptik-ZT
McAfee-GW-Edition	BehavesLike.Win32.Generic.jc
FireEye	Generic.mg.ba38c04c7ecd1195
Emsisoft	Trojan.GenericKDZ.76421 (B)
SentinelOne	Static AI – Malicious PE
Kingsoft	Win32.PSWTroj.Undef.(kcloud)
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Trojan.MSILHeracles.D53AE
GData	MSIL.Trojan.PSE.17W3FRW
AhnLab-V3	Trojan/Win.PWSX-gen.C4552297
McAfee	PWS-FCZG!BA38C04C7ECD
MAX	malware (ai score=83)
Malwarebytes	Backdoor.NanoCore
Panda	Trj/GdSda.A
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.ZXG!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	HEUR/QVM03.0.9A5B.Malware.Gen

How to remove MSILHeracles.21422?

MSILHeracles.21422 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X