MSILPerseus.236638 (B) removal guide

The MSILPerseus.236638 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILPerseus.236638 (B) virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine MSILPerseus.236638 (B)?


File Info:
crc32: F65D477B
md5: 230c5d72b8bfd4d14b4f9e55d2633345
name: vvv.exe
sha1: d3dcae16fec3a9c048abc3cefe369cbb5f79769e
sha256: e71d977c9bacce7272da75781ecf31ebf29e4b3ee13ce8ba57071421a2457713
sha512: 4e3dd7b138a5f16b6ccddc243d32cd3cd22deb0a9b75ed544eba98050cadbdfec163fb70bed4c72d1010e636617b4feee3433cdc2062c4c94f529109633506ae
ssdeep: 24576:dToJzNxwxElJdAUqoYzC3uaOHOCLkEkuf2eYtHD4BzHF/M72LZ2vvnHkGct4Y3F:ZoJr/dAj7zJ1HrLkEDfQtj4BzHFkaZ2
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2020
Assembly Version: 1.0.0.0
InternalName: ExSharpBase.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: ExSharpBase
ProductVersion: 1.0.0.0
FileDescription: ExSharpBase
OriginalFilename: ExSharpBase.exe

MSILPerseus.236638 (B) also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.MSILPerseus.236638
McAfee	Artemis!230C5D72B8BF
Cylance	Unsafe
Invincea	Generic ML PUA (PUA)
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:CrypterX-gen [Trj]
Kaspersky	HEUR:Trojan.MSIL.Injects.gen
BitDefender	Gen:Variant.MSILPerseus.236638
Paloalto	generic.ml
Ad-Aware	Gen:Variant.MSILPerseus.236638
Emsisoft	Gen:Variant.MSILPerseus.236638 (B)
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
FireEye	Generic.mg.230c5d72b8bfd4d1
GData	Gen:Variant.MSILPerseus.236638
Jiangmin	Trojan.MSIL.qwdb
Webroot	Trojan.Dropper.Gen
MAX	malware (ai score=83)
Arcabit	Trojan.MSILPerseus.D39C5E
ZoneAlarm	HEUR:Trojan.MSIL.Injects.gen
Microsoft	Trojan:Win32/Wacatac.C!ml
BitDefenderTheta	Gen:NN.ZemsilCO.34570.Dn0@aSZChGo
ALYac	Gen:Variant.MSILPerseus.236638
Malwarebytes	Spyware.PasswordStealer
ESET-NOD32	a variant of MSIL/GenKryptik.ETOU
Rising	Malware.Undefined!8.C (TFE:C:LUhV5IJphJJ)
SentinelOne	DFI – Malicious PE
Fortinet	MSIL/GenKryptik.ETOU!tr
AVG	Win32:CrypterX-gen [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_70% (D)

How to remove MSILPerseus.236638 (B)?

MSILPerseus.236638 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X