Categories: Malware

How to remove “MSILHeracles.31987”?

The MSILHeracles.31987 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSILHeracles.31987 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
CAPE detected the JesterStealer malware family
Binary compilation timestomping detected
Unusual version info supplied for binary

How to determine MSILHeracles.31987?


File Info:
name: 01FCBFCA263B93CD0459.mlwpath: /opt/CAPEv2/storage/binaries/74786b31012fc87e502acccb3e33629a53a8d9ce1e3f41e693272026a9f78501crc32: 5C619843md5: 01fcbfca263b93cd045959954e91c0a6sha1: 60a696b25262bd81152eddeb797400aee3a674e3sha256: 74786b31012fc87e502acccb3e33629a53a8d9ce1e3f41e693272026a9f78501sha512: 9cc628ec04e45bdf0f5bf75ae03d872df393194a5a988c397d512a5180b46e2456e9815f434341804ffc8954353b29d59cac8de8ae4ef486920c5ffc3a9dcc63ssdeep: 12288:bwsOfw5XwIFz20S/DEZzQQNXZJJ8c45nVx9mJGJgahg1a:3wIQ2XTh45nX4vtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T136D4E9207FEA4529F1B2693DCDBB2233C3AD72631B17734A751122861E135A9CDC36A7sha3_384: 9a2653a0504503821b79138b382e9cbfea68966224517dcf871c4538582a432770e913c10973a9f8be2f61b1b7d08d6aep_bytes: ff250020400000000000000000000000timestamp: 2091-04-10 09:12:48
Version Info:
Translation: 0x0000 0x04b0Comments: CompanyName: FileDescription: Windows Security ServicesFileVersion: 1.0.0.9InternalName: Stealer.exeLegalCopyright: Copyright © Microsoft 2019LegalTrademarks: OriginalFilename: Stealer.exeProductName: ProductVersion: 1.0.0.9Assembly Version: 1.0.0.9

MSILHeracles.31987 also known as:

Bkav	W32.AIDetectNet.01
MicroWorld-eScan	Gen:Variant.MSILHeracles.31987
FireEye	Generic.mg.01fcbfca263b93cd
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
ALYac	Gen:Variant.MSILHeracles.31987
K7AntiVirus	Password-Stealer ( 0057dc991 )
K7GW	Password-Stealer ( 0057dc991 )
Cybereason	malicious.25262b
Arcabit	Trojan.MSILHeracles.D7CF3
Cyren	W32/MSIL_Kryptik.HBH.gen!Eldorado
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Spy.Agent.CVT
APEX	Malicious
ClamAV	Win.Trojan.PasswordStealer-9942284-0
Kaspersky	HEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefender	Gen:Variant.MSILHeracles.31987
Avast	Win32:SpywareX-gen [Trj]
Ad-Aware	Gen:Variant.MSILHeracles.31987
McAfee-GW-Edition	Trojan-FRAX!01FCBFCA263B
Emsisoft	Gen:Variant.MSILHeracles.31987 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1203035
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
GData	Gen:Variant.MSILHeracles.31987
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.FRAX.C5124692
McAfee	Trojan-FRAX!01FCBFCA263B
MAX	malware (ai score=80)
Malwarebytes	Spyware.PasswordStealer
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.CVT!tr.spy
BitDefenderTheta	Gen:NN.ZemsilF.34666.Nm0@aqCVfdm
AVG	Win32:SpywareX-gen [Trj]
CrowdStrike	win/malicious_confidence_60% (D)