Should I remove “MSILHeracles.6910”?

The MSILHeracles.6910 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILHeracles.6910 virus can do?

Network activity detected but not expressed in API logs

How to determine MSILHeracles.6910?


File Info:
crc32: 92F113CE
md5: c71fb2aead2954d5a49b4f45704adf81
name: C71FB2AEAD2954D5A49B4F45704ADF81.mlw
sha1: e35f17c74e9c1f6d8f4b2521935271a3e4d78e83
sha256: acecad138c282526a751df7f18d1ea258d18fb09d979b8887a7ddd58c0c47daa
sha512: 12cf3ad324f31537806f434e0fdc029d622476a6b1deef758a9780bcc59c4e7724768924667e5830b1e15e09269ab2f611f0b8dfb00eb29a3505313b82d6dc85
ssdeep: 12288:O7jSwhUVZwdoh50Syv/u+0bGyVjKW9cdc8u2VqGWgk:6hUZmB0bpVP9cSg
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: EDRTaskScheduler.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: EDRTaskScheduler
ProductVersion: 1.0.0.0
FileDescription: EDRTaskScheduler
OriginalFilename: EDRTaskScheduler.exe

MSILHeracles.6910 also known as:

K7AntiVirus	Riskware ( 005673e61 )
Elastic	malicious (high confidence)
ALYac	Gen:Variant.MSILHeracles.6910
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	RiskWare:MSIL/Cymulate.4f09fcaa
K7GW	Riskware ( 005673e61 )
Cybereason	malicious.ead295
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Riskware.Cymulate.A
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.MSILHeracles.6910
MicroWorld-eScan	Gen:Variant.MSILHeracles.6910
Ad-Aware	Gen:Variant.MSILHeracles.6910
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34770.Mm0@aO0yjnm
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	GenericRXPB-MN!C71FB2AEAD29
FireEye	Generic.mg.c71fb2aead2954d5
Emsisoft	Gen:Variant.MSILHeracles.6910 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Dropper.MSIL.Gen
Microsoft	HackTool:Win32/Cymulion.RS!MTB
Arcabit	Trojan.MSILHeracles.D1AFE
GData	Gen:Variant.MSILHeracles.6910
McAfee	GenericRXPB-MN!C71FB2AEAD29
MAX	malware (ai score=87)
Malwarebytes	RiskWare.Agent
TrendMicro-HouseCall	TROJ_GEN.R002H09G121
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Cymulate
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/TrojanDropper.Generic.HwMASUUA

How to remove MSILHeracles.6910?

MSILHeracles.6910 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X