Malware

MSILPerseus.196197 removal guide

Malware Removal

The MSILPerseus.196197 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSILPerseus.196197 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine MSILPerseus.196197?



File Info:

crc32: A2DDA5AF
md5: 89d11b29accb84a515fe748f0235511f
name: dll_downloader.exe
sha1: ae32c975f620fdc6e474d3cb63a69c55a9369bff
sha256: a9654da4e9f5467c04a658a16d6792f95ddb59c9cfe4a914c00d2cecaa5e24e8
sha512: 2daa9986fc57b3b9bef719143f081d608be0db77a731554889dec45da79ab148f4e4c80f627d85232ce07686ec77ac5201b56c8817c2b959f07430631d262205
ssdeep: 768:cfMKVd7IrA9KjwZYDK5kmWY1i0txWirGBLiMmNnfSI2xhGIDfHC55bBn65ynky4:WXk25kWpxOxA6AIDfHC55hSpy4rlgl
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: 
Assembly Version: 1.0.0.0
InternalName: Discord Token Stealer.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 1.0.0.0
FileDescription: 
OriginalFilename: Discord Token Stealer.exe

MSILPerseus.196197 also known as:

MicroWorld-eScanGen:Variant.MSILPerseus.196197
FireEyeGeneric.mg.89d11b29accb84a5
CAT-QuickHealTrojan.Wacatac
Qihoo-360Generic/Trojan.PSW.634
McAfeeRDN/Generic PWS.y
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusPassword-Stealer ( 0055e9b21 )
BitDefenderGen:Variant.MSILPerseus.196197
K7GWPassword-Stealer ( 0055e9b21 )
Cybereasonmalicious.5f620f
TrendMicroTROJ_GEN.R045C0GAA20
BitDefenderThetaGen:NN.ZemsilF.34090.eu0@aGokOnm
F-ProtW32/MSIL_Troj.NT.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32MSIL/PSW.Discord.DH
TrendMicro-HouseCallTROJ_GEN.R045C0GAA20
AvastWin32:Malware-gen
GDataGen:Variant.MSILPerseus.196197
KasperskyHEUR:Trojan-PSW.MSIL.Agent.gen
AlibabaTrojan:MSIL/gpcya.c10614e9
AegisLabTrojan.Win32.Perseus.4!c
Endgamemalicious (high confidence)
EmsisoftGen:Variant.MSILPerseus.196197 (B)
F-SecureTrojan.TR/Agent.gpcya
ZillyaTrojan.Agent.Win32.1249170
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.lh
SentinelOneDFI – Malicious PE
Trapminemalicious.high.ml.score
SophosMal/Generic-S
APEXMalicious
CyrenW32/MSIL_Troj.NT.gen!Eldorado
AviraTR/Agent.gpcya
Antiy-AVLTrojan/Win32.Agent
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.MSILPerseus.D2FE65
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agent.gen
Acronissuspicious
VBA32CIL.HeapOverride.Heur
ALYacGen:Variant.MSILPerseus.196197
MAXmalware (ai score=82)
Ad-AwareGen:Variant.MSILPerseus.196197
PandaTrj/GdSda.A
TencentMsil.Trojan-qqpass.Qqrob.Edxp
IkarusTrojan.MSIL.PSW
eGambitUnsafe.AI_Score_99%
FortinetMSIL/Agent!tr.pws
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
MaxSecureTrojan.Malware.9723143.susgen

How to remove MSILPerseus.196197?

MSILPerseus.196197 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment