How to remove “MSILPerseus.143573”?

The MSILPerseus.143573 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILPerseus.143573 virus can do?

Network activity detected but not expressed in API logs

How to determine MSILPerseus.143573?


File Info:
crc32: 21667EF6
md5: b7c64961404b11332ce76a067eb3d1d0
name: B7C64961404B11332CE76A067EB3D1D0.mlw
sha1: 7781a5b8c7d8f318514188d67b50000bcd022dfc
sha256: a73eec95b2d0ed2fc3f2185b994f36e3b65963c4cfcb9328716de159d41f2452
sha512: 72a07e85e05fa84aea2e7c691a42e2e4361ab2440520122e3b5d25ad79c66b8ee04db5172cc33e67083ece276504573513d3f84d76afc91e406ed9b17025d6c6
ssdeep: 12288:+Pv+hiu3xJmQvHnskUbk1SJr3QjB14/qLNz1Za44:+2HngbFhQl8CZa44
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Microsoft TM
Assembly Version: 3.5.2.44
InternalName: wpsx
FileVersion: 2.1.1.21
CompanyName: Microsoft
LegalTrademarks: Micorosft TM
Comments: 
ProductName: Windows Startup initiation
ProductVersion: 3.5.2.44
FileDescription: Microsoft startup software
OriginalFilename: wpsx

MSILPerseus.143573 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.MSILPerseus.143573
FireEye	Generic.mg.b7c64961404b1133
McAfee	Artemis!B7C64961404B
Cylance	Unsafe
Sangfor	Win.Malware.Generic-6623004-0
BitDefender	Gen:Variant.MSILPerseus.143573
Cybereason	malicious.1404b1
BitDefenderTheta	Gen:NN.ZemsilF.34590.kn0@ae2634b
Cyren	W32/Trojan.FWW.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Agent.BZC
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Malware.Generic-6623004-0
Kaspersky	HEUR:Trojan-Spy.MSIL.Downeks.gen
Rising	Backdoor.Quasar!8.EF2E (TFE:dGZlOg0viSLcmkei7Q)
Ad-Aware	Gen:Variant.MSILPerseus.143573
Emsisoft	Gen:Variant.MSILPerseus.143573 (B)
F-Secure	Heuristic.HEUR/AGEN.1135947
McAfee-GW-Edition	Artemis
Sophos	Mal/Generic-S
Ikarus	Trojan.MSIL.Agent
Avira	HEUR/AGEN.1135947
MAX	malware (ai score=89)
Microsoft	Backdoor:MSIL/Quasar.GG!MTB
Gridinsoft	Spy.Win32.Agent.vl!ni
Arcabit	Trojan.MSILPerseus.D230D5
ZoneAlarm	HEUR:Trojan-Spy.MSIL.Downeks.gen
GData	MSIL.Backdoor.Quasar.6KX8CN
Cynet	Malicious (score: 85)
ALYac	Gen:Variant.MSILPerseus.143573
SentinelOne	Static AI – Malicious PE
eGambit	Trojan.Generic
Fortinet	W32/Downeks.BZC!tr
AVG	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.121218.susgen

How to remove MSILPerseus.143573?

MSILPerseus.143573 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X