MSILPerseus.115844 (file analysis)

The MSILPerseus.115844 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSILPerseus.115844 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Attempts to create or modify system certificates

Related domains:

z.whorecord.xyz

a.tomx.xyz

pastebin.com

How to determine MSILPerseus.115844?


File Info:
crc32: 14B69402
md5: 6efc981b22a601f40be504de72a4b61a
name: 6EFC981B22A601F40BE504DE72A4B61A.mlw
sha1: 7b95587225acb8d54537fe7c780eeee1c6ad6d9b
sha256: 1dd1a45f4028d3e429edc511ec2a372ead4a4b8ae0fba51ecc87857dbadec75b
sha512: 3be556be6535bd9406495016f462fbf72b3f4d7a19d2cd147431fb6db65501cd13bc0c507b4e6b1fd10d48ede2edda2ee91b0e42d37236f547207f1dc41f3f0a
ssdeep: 3072:1tAP5wkqMPFwYK2UlF9dcDEZekJSoNFC:ymWPtK2UVP1
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Berg
Assembly Version: 7.2.1.1
InternalName: WindowsApplication2.exe
FileVersion: 5.7.8.7
CompanyName: Berg
LegalTrademarks: Berg
Comments: Berg
ProductName: Berg
ProductVersion: 5.7.8.7
FileDescription: Berg
OriginalFilename: WindowsApplication2.exe

MSILPerseus.115844 also known as:

K7AntiVirus	Trojan-Downloader ( 004f65b01 )
Lionic	Trojan.MSIL.Generic.4!c
Elastic	malicious (high confidence)
ALYac	Gen:Variant.MSILPerseus.115844
Cylance	Unsafe
Zillya	Backdoor.Generic.Win32.5166
Sangfor	Trojan.Win32.Agent.8
CrowdStrike	win/malicious_confidence_80% (D)
Alibaba	Backdoor:MSIL/GenMaliciousA.4e074698
K7GW	Trojan-Downloader ( 004f65b01 )
Cybereason	malicious.b22a60
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.CIM
APEX	Malicious
Avast	Win32:GenMaliciousA-IHC [Trj]
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Backdoor.MSIL.Generic
BitDefender	Gen:Variant.MSILPerseus.115844
NANO-Antivirus	Trojan.Win32.MSILPerseus.ethpcx
MicroWorld-eScan	Gen:Variant.MSILPerseus.115844
Tencent	Msil.Trojan-downloader.Agent.Wurs
Ad-Aware	Gen:Variant.MSILPerseus.115844
BitDefenderTheta	Gen:NN.ZemsilF.34266.hq0@aatB0oi
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.6efc981b22a601f4
Emsisoft	Gen:Variant.MSILPerseus.115844 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1144715
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Tiggre!rfn
Arcabit	Trojan.MSILPerseus.D1C484
GData	Gen:Variant.MSILPerseus.115844
AhnLab-V3	Trojan/Win32.Bladabindi.C2343115
McAfee	Artemis!6EFC981B22A6
MAX	malware (ai score=99)
Panda	Trj/GdSda.A
Yandex	Trojan.DL.Agent!tMHh3+3FWxs
Ikarus	Trojan.MSIL.Crypt
Fortinet	MSIL/Kryptik.GVM!tr
AVG	Win32:GenMaliciousA-IHC [Trj]
Paloalto	generic.ml

How to remove MSILPerseus.115844?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSILPerseus.115844 (file analysis)