What is “MSILPerseus.168106”?

The MSILPerseus.168106 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILPerseus.168106 virus can do?

Network activity detected but not expressed in API logs

How to determine MSILPerseus.168106?


File Info:
crc32: 5613AD0B
md5: 317f63cfd99874d132c9ba91511c875d
name: 317F63CFD99874D132C9BA91511C875D.mlw
sha1: 1a1e06445d0e597d0f851d1e18b2c6646e2ead12
sha256: 06bff878a3e8c34fc4b68e49a517d434e4acc99d73e1115a14b9df8f278bac46
sha512: 3f94841975d91ef8662d54ae8ca667c04c6b84024b2a777417dd0b5bc24dd2c9d1dace557ba4d39e998521dfb102e57ef784f74ee97d3042c393bfc6dc946c13
ssdeep: 6144:1Wn33TOufLMg9paWfbReUrupKR15DFBt8:DuT9zJR1nz
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: XSONICX.exe
FileVersion: 1.0.0.0
ProductName: nj07t
ProductVersion: 1.0.0.0
FileDescription: nj07t
OriginalFilename: XSONICX.exe

MSILPerseus.168106 also known as:

K7AntiVirus	Trojan ( 00527bf21 )
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader23.12367
McAfee	Artemis!317F63CFD998
Cylance	Unsafe
Zillya	Trojan.Blocker.Win32.41103
CrowdStrike	win/malicious_confidence_60% (D)
BitDefender	Gen:Variant.MSILPerseus.168106
K7GW	Trojan ( 00527bf21 )
Cybereason	malicious.fd9987
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.MWA
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Ransom.MSIL.Blocker.gen
Alibaba	Trojan:MSIL/Kryptik.26532ea6
NANO-Antivirus	Trojan.Win32.Ransom.fkogce
MicroWorld-eScan	Gen:Variant.MSILPerseus.168106
Tencent	Msil.Trojan.Blocker.Lhxf
Ad-Aware	Gen:Variant.MSILPerseus.168106
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34758.um0@aCjKQsj
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.317f63cfd99874d1
Emsisoft	Gen:Variant.MSILPerseus.168106 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1104366
Antiy-AVL	Trojan/Generic.ASMalwS.29901F4
Microsoft	Backdoor:MSIL/Bladabindi
AegisLab	Trojan.MSIL.Blocker.4!c
ZoneAlarm	HEUR:Trojan-Ransom.MSIL.Blocker.gen
GData	Gen:Variant.MSILPerseus.168106
Yandex	Trojan.Kryptik!kwrQd6viPa8
Ikarus	Trojan.MSIL.CryptoObfuscator
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.MWA!tr
Panda	Trj/GdSda.A

How to remove MSILPerseus.168106?

MSILPerseus.168106 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X