What is “MSILPerseus.215305”?

The MSILPerseus.215305 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILPerseus.215305 virus can do?

Presents an Authenticode digital signature
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

How to determine MSILPerseus.215305?


File Info:
crc32: 134D70B7
md5: 7a53429710e5d456bd79c147316c1bbb
name: 4.exe
sha1: 4d46fc427c0c5aa412e13b96dd6be72044ceb18d
sha256: 53e1f72ca9dbdfe05ec0baca1f5b5bad453549d7a38845eb14013de9b05f2135
sha512: 2673325f08ff43f0a6afcdac341f7fe944927153c09efb14e16dd53974cabba283ca41c03a5c40bc5e0d5d5537d7757284ef7dce70383881deb6c0d2efaa769a
ssdeep: 6144:Bdq3IOyQfp+IC0TbC4oWlJBAMZTZwHrmmLWcBagudQOzmGTpozs7:BTQ8sbXLJBAMxCLmmLWcBax6qmGv
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: Copyright (C) Take-Two Interactive Software, Inc.
InternalName: Social Club UI
FileVersion: 2.0.4.3
CompanyName: Take-Two Interactive Software, Inc.
ProductName: Social Club UI
ProductVersion: 2.0.4.3
FileDescription: Social Club UI
OriginalFilename: SocialClubHelper.exe
Translation: 0x0409 0x04b0

MSILPerseus.215305 also known as:

MicroWorld-eScan	Gen:Variant.MSILPerseus.215305
Qihoo-360	Generic/Trojan.PSW.a72
McAfee	Artemis!7A53429710E5
ALYac	Gen:Variant.MSILPerseus.215305
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan ( 00563aab1 )
BitDefender	Gen:Variant.MSILPerseus.215305
K7GW	Trojan ( 00563aab1 )
Cybereason	malicious.27c0c5
BitDefenderTheta	Gen:NN.ZemsilF.34104.zq2@a8B4Xdmi
ESET-NOD32	a variant of MSIL/Kryptik.VGM
APEX	Malicious
Avast	Win32:DangerousSig [Trj]
GData	Gen:Variant.MSILPerseus.215305
Kaspersky	HEUR:Trojan-PSW.MSIL.Azorult.gen
Alibaba	TrojanPSW:MSIL/Kryptik.8865f3f9
AegisLab	Trojan.MSIL.Azorult.i!c
Rising	Stealer.KPOT!8.118A5 (CLOUD)
Endgame	malicious (high confidence)
Emsisoft	Gen:Variant.MSILPerseus.215305 (B)
F-Secure	Trojan.TR/AD.Khalesi.qkbpv
DrWeb	Trojan.DownLoader33.25223
McAfee-GW-Edition	RDN/Generic.dx
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan.MSIL.Injector
Avira	TR/AD.Khalesi.qkbpv
MAX	malware (ai score=89)
Antiy-AVL	Trojan[PSW]/MSIL.AZORult
Arcabit	Trojan.MSILPerseus.D34909
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Azorult.gen
Microsoft	Trojan:Win32/Yakes.RL!MTB
Ad-Aware	Gen:Variant.MSILPerseus.215305
Malwarebytes	Trojan.Injector
Panda	Trj/GdSda.A
Tencent	Win32.Trojan.Falsesign.Aiid
Fortinet	MSIL/Azorult.VGM!tr.pws
AVG	Win32:DangerousSig [Trj]
Paloalto	generic.ml

How to remove MSILPerseus.215305?

MSILPerseus.215305 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X