How to remove “Trojan.MsilFC.S15905051”?

The Trojan.MsilFC.S15905051 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.MsilFC.S15905051 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.MsilFC.S15905051?


File Info:
crc32: 59F8B019
md5: 6ef9564b2e215378a78ace78070b8e78
name: 6EF9564B2E215378A78ACE78070B8E78.mlw
sha1: 255c0862033dede10b99e0fed8cec0742a35bc1b
sha256: 3f525ce6e2e3f82494565a77c314424455d8a1d30c63cb8f8fad462345f54e74
sha512: 51f19e999af14a6811715385432c72a53a27a5fc7f3773462367d265b2936edcef80511ffe9d61ed02f6ccb43db4926012ccd1bfaec3b55853b6608b57e9217d
ssdeep: 192:e1fQ/aM+rUsH6O+Pf09/u/M2E89b7eT70fBzu0g5xc:WrrUsHePMQ/M2B9b7dBalx
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: svchost.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: svchost.exe

Trojan.MsilFC.S15905051 also known as:

K7AntiVirus	Trojan ( 700000121 )
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Siggen.31367
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.MsilFC.S15905051
ALYac	Gen:Variant.Ransom.CryptConsole.20
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
K7GW	Trojan ( 700000121 )
Cybereason	malicious.b2e215
Cyren	W32/Trojan.DIS.gen!Eldorado
ESET-NOD32	a variant of MSIL/ClipBanker.LR
APEX	Malicious
Avast	Win32:DropperX-gen [Drp]
ClamAV	Win.Packed.Clipbanker-9776642-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Ransom.CryptConsole.20
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
MicroWorld-eScan	Gen:Variant.Ransom.CryptConsole.20
Ad-Aware	Gen:Variant.Ransom.CryptConsole.20
Sophos	ML/PE-A
F-Secure	Heuristic.HEUR/AGEN.1136390
BitDefenderTheta	Gen:NN.ZemsilF.34758.am0@amnXKV
TrendMicro	TrojanSpy.MSIL.CLIPBANKER.SM
McAfee-GW-Edition	ClipBanker-FCNX!6EF9564B2E21
FireEye	Generic.mg.6ef9564b2e215378
Emsisoft	Gen:Variant.Ransom.CryptConsole.20 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1136390
eGambit	Unsafe.AI_Score_98%
Microsoft	Trojan:MSIL/ClipBanker
Arcabit	Trojan.Ransom.CryptConsole.20
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	MSIL.Trojan.ClipBanker.F
AhnLab-V3	Trojan/Win32.Llac.R18525
McAfee	ClipBanker-FCNX!6EF9564B2E21
MAX	malware (ai score=88)
VBA32	CIL.StupidStealth.Heur
Malwarebytes	Trojan.Agent.Gen
TrendMicro-HouseCall	TrojanSpy.MSIL.CLIPBANKER.SM
Rising	Spyware.ClipBanker!1.D058 (CLASSIC)
Ikarus	Trojan.MSIL.ClipBanker
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/ClipBanker.MZ!tr
AVG	Win32:DropperX-gen [Drp]

How to remove Trojan.MsilFC.S15905051?

Trojan.MsilFC.S15905051 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X