Malware

What is “MSILPerseus.136591”?

Malware Removal

The MSILPerseus.136591 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSILPerseus.136591 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image

How to determine MSILPerseus.136591?


File Info:

crc32: 30CB42B8
md5: 41338c0859c39e40f3861ade85a0c0c7
name: 41338C0859C39E40F3861ADE85A0C0C7.mlw
sha1: c80244ba5e1e462a5fd20cbf06c5702d2cd04c45
sha256: 29912097ec60d20d08c7544987992045f332d1430e24f82dba8d02ed4c32a607
sha512: fb5b7ce7d846e828b83ddadb670e95fadadca76d1e1f08c2d647288d99314a2b88dce2c1c413b1b20c70c1c27674fcf3e65b55de52501cdcdb5d579313541fdd
ssdeep: 6144:eZwoYciNXyEuxIKvqoPFZLRbUqF5jQaBlQAhbNuF8+bOpYciNXyEuxIKvqoPFZL:evIKTvIwrIKTvl
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2015
Assembly Version: 1.0.0.1
InternalName: CamSnap.exe
FileVersion: 1.0.0.1
ProductName: Putty
ProductVersion: 1.0.0.1
FileDescription: Putty
OriginalFilename: CamSnap.exe

MSILPerseus.136591 also known as:

K7AntiVirusTrojan ( 004de29f1 )
CynetMalicious (score: 85)
ALYacGen:Variant.MSILPerseus.136591
CylanceUnsafe
ZillyaTrojan.Agent.Win32.785516
SangforTrojan.Win32.Save.a
AlibabaRansom:MSIL/Ryzerlo.4df42786
K7GWTrojan ( 004de29f1 )
Cybereasonmalicious.859c39
SymantecRansom.HiddenTear!g1
ESET-NOD32a variant of MSIL/Filecoder.AK
APEXMalicious
AvastMSIL:Filecoder-AC [Trj]
KasperskyTrojan-Ransom.MSIL.Agent.yf
BitDefenderGen:Variant.MSILPerseus.136591
NANO-AntivirusTrojan.Win32.Filecoder.endmvj
MicroWorld-eScanGen:Variant.MSILPerseus.136591
TencentMsil.Trojan.Agent.Ozhz
Ad-AwareGen:Variant.MSILPerseus.136591
SophosMal/Generic-S
ComodoMalware@#y15sir9shh71
BitDefenderThetaGen:NN.ZemsilF.34608.0m0@aWCclLh
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_HiddenTear.F117CT
McAfee-GW-EditionRansomware-FTD!41338C0859C3
FireEyeGeneric.mg.41338c0859c39e40
EmsisoftGen:Variant.MSILPerseus.136591 (B)
WebrootW32.Ransom.Gen
AviraTR/ATRAPS.rbpfl
eGambitUnsafe.AI_Score_99%
MicrosoftRansom:MSIL/Ryzerlo.A
ArcabitTrojan.MSILPerseus.D2158F
AegisLabTrojan.MSIL.Agent.j!c
GDataMSIL.Trojan-Ransom.Cryptear.H
McAfeeRansomware-FTD!41338C0859C3
MAXmalware (ai score=100)
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_HiddenTear.F117CT
RisingRansom.FileCryptor!8.1A7 (CLOUD)
YandexTrojan.Filecoder!HAhchuRtWLA
SentinelOneStatic AI – Malicious PE
FortinetMSIL/Filecoder.AK!tr.ransom
AVGMSIL:Filecoder-AC [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Filecoder.HgIASOoA

How to remove MSILPerseus.136591?

MSILPerseus.136591 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment