Categories: Trojan

Trojan.MsilFC.S28621437 removal guide

The Trojan.MsilFC.S28621437 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.MsilFC.S28621437 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics
CAPE detected the RedLine malware family
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine Trojan.MsilFC.S28621437?


File Info:
name: 1A3D78B28EA1825EFC30.mlwpath: /opt/CAPEv2/storage/binaries/108c56fc5f88f5e2fe9cfa90dab1564cf6f19e1161555bff47eb5a7b9ab03e70crc32: 31BA192Dmd5: 1a3d78b28ea1825efc30919cff7ad6b8sha1: f8660214c50e61807a3e63cf4cf024a788d31518sha256: 108c56fc5f88f5e2fe9cfa90dab1564cf6f19e1161555bff47eb5a7b9ab03e70sha512: d6c7d37b23d461ef6118fa8cc4faf0cd379dbcecb71967db4cb24635188298795635058b464842679657d51bf77543a82d545bdf2d5e53ea248f82c353e25692ssdeep: 1536:ndJwl4DWKLhz62fOGKWarHq91CVfbm9owmbr+g+PSJoJBZOcuVG8uZROeT:dJhz62fOSarHaIlYPSJoJBZO/V1eTtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A1A35A2563CD4A68EEBD8B7568B3015C4BB1E54F2411EB8B4EC6E0DA1E72BC017176E3sha3_384: 8f08f809af6c9d04b115cad57e0df5d4f479af9d8838b527e7af363245dfa6d8bae7606e4ae412fa5c7b58e7b7d29d99timestamp: 2085-08-28 18:55:08
Version Info:
Translation: 0x0000 0x04b0FileDescription:  FileVersion: 0.0.0.0InternalName: Enervative.exeLegalCopyright:  OriginalFilename: Enervative.exeProductVersion: 0.0.0.0Assembly Version: 0.0.0.0

Trojan.MsilFC.S28621437 also known as:

Bkav	W32.AIDetectNet.01
DrWeb	Trojan.PWS.StealerNET.125
MicroWorld-eScan	Trojan.GenericKDZ.91313
FireEye	Generic.mg.1a3d78b28ea1825e
CAT-QuickHeal	Trojan.MsilFC.S28621437
ALYac	Trojan.GenericKDZ.91313
Cylance	Unsafe
VIPRE	Trojan.GenericKDZ.91313
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Unwanted-Program ( 0059886f1 )
K7GW	Unwanted-Program ( 0059886f1 )
CrowdStrike	win/malicious_confidence_70% (D)
Cyren	W32/MSIL_Agent.BJO.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Spy.Agent.DFY
APEX	Malicious
ClamAV	Win.Trojan.Redline-9938775-1
Kaspersky	HEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefender	Trojan.GenericKDZ.91313
Ad-Aware	Trojan.GenericKDZ.91313
Emsisoft	Trojan.GenericKDZ.91313 (B)
Comodo	Heur.Corrupt.PE@1z141z3
F-Secure	Heuristic.HEUR/AGEN.1253051
McAfee-GW-Edition	GenericRXRX-MU!1A3D78B28EA1
Trapmine	suspicious.low.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
GData	MSIL.Trojan-Stealer.Redline.G
Google	Detected
Avira	HEUR/AGEN.1253051
Arcabit	Trojan.Generic.D164B1
ZoneAlarm	HEUR:Trojan-Spy.MSIL.Stealer.gen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.FRAX.C5198182
Acronis	suspicious
McAfee	GenericRXRX-MU!1A3D78B28EA1
MAX	malware (ai score=88)
Malwarebytes	Spyware.PasswordStealer.MSIL
Rising	Stealer.Agent!1.DC63 (CLASSIC)
Ikarus	Trojan.MSIL.Spy
Fortinet	MSIL/Agent.DFY!tr