What is “MSILPerseus.145408”?

The MSILPerseus.145408 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILPerseus.145408 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSILPerseus.145408?


File Info:
crc32: 1F04A5E5
md5: 414dbd131cc9a09efcfe1c1ec635eba3
name: proverka.exe
sha1: c0e72554d5a8d6b20ba311dc39df83e52ccfba5d
sha256: 87a3b69402a4ef6a3ade12c8db7c71196c1034b4b10c64c8d292f5bb031c7b36
sha512: bf0084e75c16cb311ec92e52d0271c5d02e7f0f701230acb4987dd187b303b88567e0f7d4aaeb1e608ebea15c1bf498c2bcae147a69faacb1a2073c68a0006fd
ssdeep: 3072:spMJ6UZhrjV15dxofHIDPU9eNdf3KATTNcCir0wlJaLg6CqU:s2QwRX5dxSoDPU9GdI/lC3Cq
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: WRbDeRLT.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Client
ProductVersion: 1.0.0.0
FileDescription: Client
OriginalFilename: WRbDeRLT.exe

MSILPerseus.145408 also known as:

MicroWorld-eScan	Gen:Variant.MSILPerseus.145408
McAfee	Packed-ZQ!414DBD131CC9
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 0052a44b1 )
BitDefender	Gen:Variant.MSILPerseus.145408
K7GW	Trojan ( 0052a44b1 )
Cybereason	malicious.31cc9a
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Dropper.Msilperseus-6563227-0
GData	Gen:Variant.MSILPerseus.145408
Kaspersky	Trojan-Dropper.MSIL.Agent.sesjlx
Alibaba	TrojanDropper:MSIL/Kryptik.6a9538f8
NANO-Antivirus	Trojan.Win32.Kryptik.eywajg
Tencent	Msil.Trojan-dropper.Agent.Ozsf
Ad-Aware	Gen:Variant.MSILPerseus.145408
Emsisoft	Gen:Variant.MSILPerseus.145408 (B)
Comodo	TrojWare.MSIL.Perseus.MVK@7jfltj
F-Secure	Heuristic.HEUR/AGEN.1029572
DrWeb	Trojan.MulDrop7.64007
Zillya	Trojan.Kryptik.Win32.1362465
TrendMicro	TROJ_ATROS.THDAIAH
McAfee-GW-Edition	Packed-ZQ!414DBD131CC9
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.414dbd131cc9a09e
Sophos	Mal/Generic-S
SentinelOne	DFI – Malicious PE
Webroot	W32.Malware.Gen
Avira	HEUR/AGEN.1029572
Endgame	malicious (high confidence)
Arcabit	Trojan.MSILPerseus.D23800
AegisLab	Trojan.Win32.Generic.4!c
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Tiggre!rfn
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZemsilF.34090.nm0@auwgWx
ALYac	Gen:Variant.MSILPerseus.145408
MAX	malware (ai score=96)
ESET-NOD32	a variant of MSIL/Kryptik.MVK
TrendMicro-HouseCall	TROJ_ATROS.THDAIAH
Rising	Dropper.Agent!8.2F (CLOUD)
Yandex	Trojan.Kryptik!gwb88FwklZM
Ikarus	Trojan.MSIL.Crypt
Fortinet	MSIL/GenKryptik.BPLL!tr
MaxSecure	Trojan.Malware.12039455.susgen
AVG	FileRepMetagen [Malware]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	Win32/Trojan.c20

How to remove MSILPerseus.145408?

MSILPerseus.145408 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X