Trojan:MSIL/Heracles.ASGD!MTB removal tips

The Trojan:MSIL/Heracles.ASGD!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:MSIL/Heracles.ASGD!MTB virus can do?

Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Trojan:MSIL/Heracles.ASGD!MTB?


File Info:
name: 1FE63ACF33663EB22D4D.mlw
path: /opt/CAPEv2/storage/binaries/eed05cd27e86f4dcfa65d142197295b8db3a8fd75a8e0c3c34e6c73b4324cc56
crc32: 1A13FB2E
md5: 1fe63acf33663eb22d4d613c87acd0d2
sha1: b1b53170c676883b7f8600a1a8984e45029d2641
sha256: eed05cd27e86f4dcfa65d142197295b8db3a8fd75a8e0c3c34e6c73b4324cc56
sha512: 0551c205ed9fffa97e082108c1f207cba7e2cab405e0d9482dd335d789e7c3b141a3f7a6263eba55a135d9cd8e0e60d11acf4c296b6ccb9785987001f38a5d62
ssdeep: 1536:/6lgXChXrlgc230i0i7HL4Xa0fjjK8eqJivezp4kdh0V5Yfj8ew5br/aRTyaZ:ScChXZgc230i0e4Xa0fjjK8eqY7N5A
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1CA93FD0EB2CE1469FA6DFEB84BE68D05C375A4CE5E02CAF69C9960D2C6317445B03E74
sha3_384: 9c480af36f023f436ba49dfa365b2554d9176c2633f763ba74bfbb797798e17884c974830c0c4a06fc8e05cb1dcb369c
ep_bytes: ff250020400000000000000000000000
timestamp: 2017-02-13 03:05:07

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: gzsp31dv.exe
LegalCopyright:  
OriginalFilename: gzsp31dv.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan:MSIL/Heracles.ASGD!MTB also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.ScarletFlash.4!c
MicroWorld-eScan	IL:Trojan.MSILZilla.86354
Skyhigh	BehavesLike.Win32.Generic.mt
McAfee	Artemis!1FE63ACF3366
Cylance	unsafe
Sangfor	Trojan.Msil.Heracles.Vbez
Alibaba	Trojan:MSIL/Heracles.8c99eb61
Arcabit	Trojan.MSILHeracles.D22133
Symantec	Trojan.Gen.MBT
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	IL:Trojan.MSILZilla.86354
Avast	Win32:MalwareX-gen [Trj]
Emsisoft	IL:Trojan.MSILZilla.86354 (B)
VIPRE	Gen:Variant.MSILHeracles.139571
Sophos	Mal/Generic-S
Antiy-AVL	Trojan/Win32.Wacatac
Microsoft	Trojan:MSIL/Heracles.ASGD!MTB
GData	IL:Trojan.MSILZilla.86354
Varist	W32/ABRisk.MOVS-7432
AhnLab-V3	Trojan/Win32.Xema.C408825
ALYac	Gen:Variant.MSILHeracles.139571
Malwarebytes	Generic.Malware/Suspicious
TrendMicro-HouseCall	TROJ_GEN.R002H09AI24
Rising	Trojan.ScarletFlash!8.FB27 (CLOUD)
Ikarus	Trojan.MSIL.Heracles
Fortinet	PossibleThreat
AVG	Win32:MalwareX-gen [Trj]
Cybereason	malicious.0c6768
DeepInstinct	MALICIOUS

How to remove Trojan:MSIL/Heracles.ASGD!MTB?

Trojan:MSIL/Heracles.ASGD!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X