MSILPerseus.164498 (file analysis)

The MSILPerseus.164498 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILPerseus.164498 virus can do?

Network activity detected but not expressed in API logs

How to determine MSILPerseus.164498?


File Info:
crc32: A06B2AC6
md5: 2b23c688dffefaa5530ea5e8b068fc43
name: 2B23C688DFFEFAA5530EA5E8B068FC43.mlw
sha1: caa9f6cb7a4e3d4d9aa91e4b04baca8f90d93947
sha256: 215a1e5801d8092f38319873cb818e0b706832b3299d0b02766c988471ab8a50
sha512: 6211c0706e6b1d7b396af191de68183a3ac7136df9ac39f935f179852bc3231c2ebb9bfb2f3b92a2674942e5a2df95980bd068dda326ae430ef5a79ea5551ff7
ssdeep: 1536:U5CTlxGsKZe5klOXZAH69qzZP1Fo22ZPmt7iPnHY:oCTln3kw0d92HY
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: chkdsk
FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7600.16385
FileDescription: Check Disk Utility
OriginalFilename: CHKDSK.EXE
Translation: 0x0409 0x04b0

MSILPerseus.164498 also known as:

Lionic	Trojan.MSIL.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.PackedNET.517
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.MSILPerseus.164498
Cylance	Unsafe
Zillya	Backdoor.Generic.Win32.877
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Backdoor:MSIL/Injector.7271f848
Cybereason	malicious.8dffef
Cyren	W32/Ransom.KZ.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Injector.IFO
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.Ursu-6860469-0
Kaspersky	HEUR:Backdoor.MSIL.Generic
BitDefender	Gen:Variant.MSILPerseus.164498
NANO-Antivirus	Trojan.Win32.Dwn.dzuulw
MicroWorld-eScan	Gen:Variant.MSILPerseus.164498
Tencent	Msil.Backdoor.Generic.Hqvj
Ad-Aware	Gen:Variant.MSILPerseus.164498
Sophos	ML/PE-A + Troj/MSIL-FMQ
Comodo	TrojWare.MSIL.Injector.IFO@7gewfj
BitDefenderTheta	Gen:NN.ZemsilF.34294.eq0@amC6XUpi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Trojan-FOUV!2B23C688DFFE
FireEye	Generic.mg.2b23c688dffefaa5
Emsisoft	Malware.Generic.CN1 (A)
SentinelOne	Static AI – Malicious PE
Avira	TR/Dropper.Gen
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.2813573
Microsoft	Backdoor:Win32/Bladabindi!ml
Arcabit	Trojan.MSILPerseus.D28292
GData	Gen:Variant.MSILPerseus.164498
AhnLab-V3	Trojan/Win32.Injector.C2753487
McAfee	Trojan-FOUV!2B23C688DFFE
MAX	malware (ai score=100)
Malwarebytes	Malware.AI.4071261378
Panda	Trj/GdSda.A
Yandex	Trojan.Injector!Ku5z+ujQMSo
Ikarus	Trojan.MSIL.Injector
Fortinet	MSIL/Injector.CMQ!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove MSILPerseus.164498?

MSILPerseus.164498 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X