About “Trojan.MsilFC.S24736542” infection

The Trojan.MsilFC.S24736542 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.MsilFC.S24736542 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics
CAPE detected the RedLine malware family
Binary compilation timestomping detected

How to determine Trojan.MsilFC.S24736542?


File Info:
name: 0A469493A12E32CBC47A.mlw
path: /opt/CAPEv2/storage/binaries/6abc2853828c3a9f0c39fc6d63e344cd4a0c2731479f4ad57dbc97dc7d418f30
crc32: FB996BCE
md5: 0a469493a12e32cbc47a440a65fdf292
sha1: 2c1fd3037ebe9af06ebf1b587ceb75a2d8d1080e
sha256: 6abc2853828c3a9f0c39fc6d63e344cd4a0c2731479f4ad57dbc97dc7d418f30
sha512: 2380dee905be5e06f057e9bfc16d02ead1fe1aed4c94ef698339a61fe66c0241e8525989e1a19be915c4de0da09a5045a48d145ae6e681cb3e5fd635a41df917
ssdeep: 1536:5qsIOqJGlbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2XteulgS6p8l:XTuOYj+zi0ZbYe1g0ujyzdr8
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T17BA35D20679C9F19EAFD1B74B4B2011043F1E08A9091FB4B4DC1A4E71FA7B865957EF2
sha3_384: e4508543d56ecc8a9b7cb52ea1d1dd58ac75e0348c8b7ea39b158f6f0afb423a1875fee0bf6442adce5ea9cfff3a15ac
ep_bytes: ff250020400000000000000000000000
timestamp: 2097-08-14 23:34:58

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: Implosions.exe
LegalCopyright:  
OriginalFilename: Implosions.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan.MsilFC.S24736542 also known as:

Bkav	W32.ProDuuctAD.Trojan
tehtris	Generic.Malware
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.MsilFC.S24736542
ALYac	IL:Trojan.MSILZilla.RedLine.22424
Cylance	unsafe
Zillya	Trojan.Agent.Win32.2459458
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Spyware ( 0057a2d41 )
K7GW	Spyware ( 0057a2d41 )
Cybereason	malicious.3a12e3
VirIT	Trojan.Win32.Genus.PMN
Cyren	W32/MSIL_Agent.BJO.gen!Eldorado
Symantec	Trojan Horse
Elastic	Windows.Trojan.RedLineStealer
ESET-NOD32	a variant of MSIL/Spy.RedLine.A
APEX	Malicious
ClamAV	Win.Malware.Bulz-9880537-0
Kaspersky	HEUR:Trojan-PSW.MSIL.Reline.gen
BitDefender	IL:Trojan.MSILZilla.RedLine.22424
MicroWorld-eScan	IL:Trojan.MSILZilla.RedLine.22424
Avast	Win32:MalwareX-gen [Trj]
Tencent	Trojan-PSW.MSIL.Reline.ha
TACHYON	Trojan-PWS/W32.DN-Reline.97792.E
Emsisoft	Trojan-Spy.Agent (A)
F-Secure	Heuristic.HEUR/AGEN.1305500
DrWeb	Trojan.PWS.Stealer.32288
VIPRE	IL:Trojan.MSILZilla.RedLine.22424
McAfee-GW-Edition	BehavesLike.Win32.Generic.nm
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.0a469493a12e32cb
Sophos	Mal/Reline-B
Ikarus	Trojan-Spy.RedLineStealer
Jiangmin	Trojan.PSW.MSIL.cihh
Avira	HEUR/AGEN.1305500
Antiy-AVL	Trojan[Spy]/MSIL.Agent
Microsoft	PWS:MSIL/RedLine!atmn
Arcabit	IL:Trojan.MSILZilla.RedLine.D5798
SUPERAntiSpyware	Trojan.Agent/Gen-Crypt
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Reline.gen
GData	MSIL.Trojan-Stealer.Redline.B
Google	Detected
AhnLab-V3	Infostealer/Win.RedLine.C4566112
Acronis	suspicious
McAfee	GenericRXPZ-SW!0A469493A12E
MAX	malware (ai score=81)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Generic.Spyware.Stealer.DDS
Zoner	Trojan.Win32.139086
Rising	Backdoor.SectopRAT!1.DA27 (CLASSIC)
Yandex	TrojanSpy.Agent!EkOOBlAAStI
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.95853585.susgen
Fortinet	MSIL/Agent.DFY!tr.spy
BitDefenderTheta	Gen:NN.ZemsilF.36250.fm0@aqoK3ub
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Trojan.MsilFC.S24736542?

Trojan.MsilFC.S24736542 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X