How to remove “Trojan-PSW.MSIL.Reline.ves”?

The Trojan-PSW.MSIL.Reline.ves is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-PSW.MSIL.Reline.ves virus can do?

Sample contains Overlay data
Authenticode signature is invalid
CAPE detected the RedLine malware family

How to determine Trojan-PSW.MSIL.Reline.ves?


File Info:
name: 0FB0B37DED131C82C107.mlw
path: /opt/CAPEv2/storage/binaries/2c9856647677ad6cf1727e4d065cb11935169be3d754e1db794178b4447e09ae
crc32: 129EE97E
md5: 0fb0b37ded131c82c107c6a844fc6875
sha1: ef4c0d829a4aabfb3cf05679aec798e125bbf3d5
sha256: 2c9856647677ad6cf1727e4d065cb11935169be3d754e1db794178b4447e09ae
sha512: 44cb2fa9a8eecdf746b3c38658aaec787078df0b5bda8521f1f8f7b89777f79910447b9afb28e0394ff7d6f41e1318f423d383a1008be5174eecbee4a687326d
ssdeep: 3072:9G93PSQJLrrcJV+m5cLQmRStQoaEChJpxAx++RhiZ58e8hCyOCW:9GdSQJMji/oa9b0RhizD
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T11A243824379B8934D6BB4D3D6C619DC076BDBC126942D74B2ECCF1693A33B809B21672
sha3_384: e9559364c1e7ae45d2dbd22cd332a7ac154e5aef8146a6bece290a4e5c505d2ec662e4103c3f0d302610aa47fb8ceb17
ep_bytes: 83c0580fcaf7ee83ef48c1c85b0fcff7
timestamp: 2023-11-13 10:39:31

Version Info:
0: [No Data]

Trojan-PSW.MSIL.Reline.ves also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.RedLine.4!c
MicroWorld-eScan	Trojan.GenericKDZ.100153
FireEye	Generic.mg.0fb0b37ded131c82
Skyhigh	BehavesLike.Win32.Generic.dm
McAfee	Artemis!0FB0B37DED13
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
Elastic	Windows.Trojan.RedLineStealer
ESET-NOD32	a variant of MSIL/Spy.RedLine.A
APEX	Malicious
ClamAV	Win.Trojan.Redline-9938775-1
Kaspersky	Trojan-PSW.MSIL.Reline.ves
Alibaba	Trojan:MSIL/RedLine.ee3f894c
Rising	Stealer.Agent!1.DC63 (CLASSIC)
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/AD.RedLineSteal.farep
DrWeb	Trojan.PWS.Stealer.37078
VIPRE	Trojan.GenericKDZ.100153
Trapmine	suspicious.low.ml.score
Google	Detected
Avira	TR/AD.RedLineSteal.farep
Varist	W32/ABRisk.CHRD-7489
Antiy-AVL	Trojan[Spy]/MSIL.RedLine
Microsoft	Trojan:MSIL/RedLine.MD!MTB
Gridinsoft	Malware.Win32.RedLine.bot
Xcitium	TrojWare.Win32.Injector.ZRA@54s8j9
ZoneAlarm	Trojan-PSW.MSIL.Reline.ves
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZexaF.36792.nqY@amPlUOm
ALYac	Trojan.GenericKDZ.100153
DeepInstinct	MALICIOUS
VBA32	Trojan.MSIL.InfoStealer.gen.U
Cylance	unsafe
Tencent	Trojan-Psw.Win32.Stealer.16000501
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:PWSX-gen [Trj]
Cybereason	malicious.29a4aa
Avast	Win32:PWSX-gen [Trj]

How to remove Trojan-PSW.MSIL.Reline.ves?

Trojan-PSW.MSIL.Reline.ves removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X