MSIL/Packed.MultiPacked.CW removal instruction

The MSIL/Packed.MultiPacked.CW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Packed.MultiPacked.CW virus can do?

The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine MSIL/Packed.MultiPacked.CW?


File Info:
crc32: F461A43A
md5: 6b8b57372d8a6d41462bafe3e47235e4
name: 6B8B57372D8A6D41462BAFE3E47235E4.mlw
sha1: 0aa64e7658f84f1c6a5a3ccafe25efcb94c48038
sha256: 2c39cf07a5d9fb94b646142d7bc44a3c93ca52771a0a3f6421f640c6b3fafb8e
sha512: 661e62a4b02423ae776c7e7b746afbdbc17940987fd581ef72552d3bb9b372128137e5926249ac078989a0ba667da3b5eb15f5acba02eb74421ff99d5e05d4eb
ssdeep: 6144:EXfpuPNeI1n9ekpN+v0Cv+9V9pLHyAAc6I/F+9ThvaGkUmzTeoC8MUu:EPpF0tpNu0Cv+D9pLSf9TJ+l3a8MU
type: PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2017
Assembly Version: 1.0.0.0
InternalName: VisaReset.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Visa Reset
ProductVersion: 1.0.0.0
FileDescription: Visa Reset
OriginalFilename: VisaReset.exe

MSIL/Packed.MultiPacked.CW also known as:

K7AntiVirus	Trojan ( 00519b371 )
Lionic	Trojan.Win32.Generic.4!c
ALYac	Trojan.GenericKD.40166165
Cylance	Unsafe
K7GW	Trojan ( 00519b371 )
Cybereason	malicious.72d8a6
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Packed.MultiPacked.CW
APEX	Malicious
Avast	Win64:Trojan-gen
BitDefender	Trojan.GenericKD.40166165
MicroWorld-eScan	Trojan.GenericKD.40166165
Ad-Aware	Trojan.GenericKD.40166165
Sophos	Mal/Generic-S
Comodo	Malware@#2ahh0x4cpcqfu
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win64.Generic.gc
FireEye	Trojan.GenericKD.40166165
Emsisoft	Trojan.GenericKD.40166165 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1105312
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Trojan.GenericKD.40166165
McAfee	Artemis!6B8B57372D8A
MAX	malware (ai score=86)
Malwarebytes	Generic.Malware/Suspicious
Ikarus	Trojan.MSIL.Injector
Fortinet	MSIL/Injector.TCA!tr
AVG	Win64:Trojan-gen
Paloalto	generic.ml

How to remove MSIL/Packed.MultiPacked.CW?

MSIL/Packed.MultiPacked.CW removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X