Categories: Malware

Should I remove “MSILPerseus.180394”?

The MSILPerseus.180394 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSILPerseus.180394 virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

How to determine MSILPerseus.180394?


File Info:
crc32: 7272247Emd5: e034ea89b57508b47850f8577f2792d4name: E034EA89B57508B47850F8577F2792D4.mlwsha1: 434857c63d6780cd618094b4d9123ce88e9a709fsha256: 0e33500f84b02ece447d006a63386205ae0ff0c1c404f3d1ff7461a594ce6ac7sha512: 41cc710eed59fad30834d1b65fcc8015f8b8050e1526d123171edf037d3fa8bb1d0cd51d9a642c0d41a580d200d1c0362c259879c44d3c19dc39e86c6466a852ssdeep: 384:aaeGO2okYqU7A7WxKPBan2mkHTrLO7WxKPBan2mkHTrLiSAYk2rv5d++t/EFnwi:aF737p4Pgkzfr4Pgkzfh5/Ee3otype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: Copyright xa9 Microsoft 2013Assembly Version: 1.0.0.0InternalName: BehringerX32Administrator.exeFileVersion: 1.0.0.0CompanyName: MicrosoftProductName: BehringerX32AdministratorProductVersion: 1.0.0.0FileDescription: BehringerX32AdministratorOriginalFilename: BehringerX32Administrator.exe

MSILPerseus.180394 also known as:

DrWeb	Trojan.Winlock.7751
Cynet	Malicious (score: 85)
ALYac	Gen:Variant.MSILPerseus.180394
Cylance	Unsafe
Sangfor	Ransom.Win32.Genasom.KT
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Ransom:Win32/Genasom.8a389a33
Cybereason	malicious.9b5750
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/LockScreen.CQ
APEX	Malicious
Avast	MSIL:LockScreen-M [Trj]
Kaspersky	HEUR:Trojan-Ransom.Win32.Generic
BitDefender	Gen:Variant.MSILPerseus.180394
NANO-Antivirus	Trojan.Win32.Gimemo.bfttcs
MicroWorld-eScan	Gen:Variant.MSILPerseus.180394
Tencent	Win32.Trojan.Gimemo.Agki
Ad-Aware	Gen:Variant.MSILPerseus.180394
Sophos	Mal/Generic-S
Comodo	Malware@#npxacajnj2a
BitDefenderTheta	Gen:NN.ZemsilF.34608.bm0@ay96keb
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_SPNR.14EJ13
McAfee-GW-Edition	Trojan-FASX!E034EA89B575
FireEye	Gen:Variant.MSILPerseus.180394
Emsisoft	Gen:Variant.MSILPerseus.180394 (B)
Avira	TR/Autorun.JR
eGambit	Unsafe.AI_Score_99%
Microsoft	Ransom:Win32/Genasom.KT
Arcabit	Trojan.MSILPerseus.D2C0AA
AegisLab	Trojan.Win32.Generic.4!c
GData	Gen:Variant.MSILPerseus.180394
AhnLab-V3	Trojan/Win32.Gimemo.R49965
McAfee	Trojan-FASX!E034EA89B575
MAX	malware (ai score=85)
Malwarebytes	Malware.AI.3954378200
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_SPNR.14EJ13
Rising	Ransom.Genasom!8.293 (CLOUD)
Ikarus	Trojan-Ransom.Gimemo
Fortinet	W32/Gimemo.AWPL!tr
AVG	MSIL:LockScreen-M [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Worm.AutoRun.HgIASOYA