About “MSILHeracles.41662” infection

The MSILHeracles.41662 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILHeracles.41662 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine MSILHeracles.41662?


File Info:
name: 004D5B963E52F53E4333.mlw
path: /opt/CAPEv2/storage/binaries/9ef114526ae9d9203700ecf9df20e95b572d937fd79f1a9ae45c28e0551a8d71
crc32: DFACE8E1
md5: 004d5b963e52f53e43336e394394d00e
sha1: fdc8c2b23ee0c8dd3c686b6d05668f847cdd01a8
sha256: 9ef114526ae9d9203700ecf9df20e95b572d937fd79f1a9ae45c28e0551a8d71
sha512: 2f06283386356946d35c71ce620efa747a473bbfc0abc799283929b63cf68a7bc4923e942141c9fd8fd1df54a81244d1e45105abe70815055f54717537a8d379
ssdeep: 384:UQzFNgnJ2qis4oAyZin8Gj6hobN5pkhsUH8sdkk0EQHkkbjkxyuZw0+XGpnohzvf:5jbqiwv4bQor
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19FB2B845A7FC8215F6FF1F39ACB022100BB3B9425D32E65F5750606E0E63B65CA50BA3
sha3_384: 2ec795f7933f52a67989648094f1a55f0dc4892b4a1a1da7794496d2bdc1850b126a642f606efb919b9f0d1838667a48
ep_bytes: ff250020400000000000000000000000
timestamp: 2055-09-23 17:11:41

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: RemoteProcessKill
FileVersion: 1.0.0.0
InternalName: RemoteProcessKill.exe
LegalCopyright: Copyright ©  2022
LegalTrademarks: 
OriginalFilename: RemoteProcessKill.exe
ProductName: RemoteProcessKill
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSILHeracles.41662 also known as:

Bkav	W32.AIDetectNet.01
Lionic	Trojan.Win32.Heracles.4!c
MicroWorld-eScan	Gen:Variant.MSILHeracles.41662
FireEye	Gen:Variant.MSILHeracles.41662
McAfee	Artemis!004D5B963E52
Cylance	Unsafe
Sangfor	Trojan.Msil.Fakefilecoder.V2pb
K7AntiVirus	Trojan ( 005930e41 )
Alibaba	Trojan:MSIL/FakeFilecoder.75ab4550
K7GW	Trojan ( 005930e41 )
Cyren	W32/ABRisk.VRHL-1829
Symantec	Trojan.Gen.MBT
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of MSIL/FakeFilecoder.D
APEX	Malicious
TrendMicro-HouseCall	TROJ_GEN.R002H0CHP22
Paloalto	generic.ml
BitDefender	Gen:Variant.MSILHeracles.41662
Avast	Win32:MalwareX-gen [Trj]
Tencent	Win32.Trojan.Agen.Tnkl
Ad-Aware	Gen:Variant.MSILHeracles.41662
Emsisoft	Gen:Variant.MSILHeracles.41662 (B)
VIPRE	Gen:Variant.MSILHeracles.41662
McAfee-GW-Edition	Artemis!Trojan
Sophos	Generic PUA PN (PUA)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.MSILHeracles.41662
Google	Detected
Avira	HEUR/AGEN.1217765
MAX	malware (ai score=86)
Antiy-AVL	Trojan/Generic.ASMalwS.6171
Arcabit	Trojan.MSILHeracles.DA2BE
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win.Generic.C5228132
ALYac	Gen:Variant.MSILHeracles.41662
Malwarebytes	Trojan.KillProc
Rising	Trojan.FakeFilecoder!8.10894 (CLOUD)
Ikarus	Trojan-Ransom.FileCrypter
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:MalwareX-gen [Trj]
CrowdStrike	win/malicious_confidence_60% (W)

How to remove MSILHeracles.41662?

MSILHeracles.41662 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X