MSILPerseus.228239 malicious file

The MSILPerseus.228239 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILPerseus.228239 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine MSILPerseus.228239?


File Info:
name: AA4009A80C8D88FF9E26.mlw
path: /opt/CAPEv2/storage/binaries/8e20d867a8eedebe5c78603de741a23f70fc7844c65354a074d215dcf38f0348
crc32: 663FF477
md5: aa4009a80c8d88ff9e265129c18f35be
sha1: 5e8542baf055e5475ff367feebf3d1f0933e0029
sha256: 8e20d867a8eedebe5c78603de741a23f70fc7844c65354a074d215dcf38f0348
sha512: 8076728377dd2ce3d40c2322357f30fe49757a41979d2865cb2dc3b74575124cbca2a20eaf413e0feacdef7d8ea742b8490fcfd7f0899a8843ac661aec6dc513
ssdeep: 384:wywaEAuflHXoUsAmRMsnljM2aEbNOieusphWbnH0IH0E3dSQieHYZZcWSJTu/xZW:wywaus1Osw40jyHaQix4WSJTu/xqBOR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CAD2E5112B888F22D67503B55AB3C50AAB766027047AEA58BCCD80DD4FF5784A371FE3
sha3_384: 654196d90e74af265887c5fb8558c029ba0c1b91f109f71f202722fe3edcf1a5b4f14eb446aa62fd2b46f1762e878277
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-07-27 06:41:20

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: Microsoft
FileDescription: CrypterExample
FileVersion: 1.0.0.0
InternalName: CrypterExample.exe
LegalCopyright: Copyright © Microsoft 2013
LegalTrademarks: 
OriginalFilename: CrypterExample.exe
ProductName: CrypterExample
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSILPerseus.228239 also known as:

Lionic	Trojan.Win32.Convagent.4!c
MicroWorld-eScan	Gen:Variant.MSILPerseus.228239
FireEye	Gen:Variant.MSILPerseus.228239
ALYac	Gen:Variant.MSILPerseus.228239
Cylance	Unsafe
Zillya	Tool.Crypter.Win32.795
K7AntiVirus	Riskware ( 004ba0b21 )
Alibaba	Trojan:Win32/Snojan.36ff97d0
K7GW	Riskware ( 004ba0b21 )
Cybereason	malicious.80c8d8
BitDefenderTheta	Gen:NN.ZemsilF.34294.bm0@aaCblV
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Riskware.Crypter.EL
TrendMicro-HouseCall	TROJ_GEN.R002C0PKP21
ClamAV	Win.Malware.Msilinjector-9835683-0
Kaspersky	Trojan.Win32.Snojan.cuax
BitDefender	Gen:Variant.MSILPerseus.228239
Avast	Win32:TrojanX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10bb01be
Ad-Aware	Gen:Variant.MSILPerseus.228239
Sophos	Generic ML PUA (PUA)
TrendMicro	TROJ_GEN.R002C0PKP21
McAfee-GW-Edition	GenericRXEB-TH!AA4009A80C8D
Emsisoft	Gen:Variant.MSILPerseus.228239 (B)
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Generic.ASMalwS.220F7F5
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	MSIL.Trojan.Kryptik.HE
AhnLab-V3	Malware/Win32.RL_Generic.C4311429
McAfee	GenericRXEB-TH!AA4009A80C8D
VBA32	TScope.Trojan.MSIL
Malwarebytes	Malware.AI.2519575725
APEX	Malicious
Ikarus	PUA.MSIL.Riskware
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Crypter
AVG	Win32:TrojanX-gen [Trj]
Panda	Trj/GdSda.A

How to remove MSILPerseus.228239?

MSILPerseus.228239 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X