Malware

MSILPerseus.36288 removal tips

Malware Removal

The MSILPerseus.36288 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSILPerseus.36288 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Steals private information from local Internet browsers
  • Exhibits possible ransomware file modification behavior
  • Writes a potential ransom message to disk
  • Network activity detected but not expressed in API logs

How to determine MSILPerseus.36288?


File Info:

crc32: 6B1B9816
md5: f9b8f12fcadb043abdca8bd7d0c8e1f4
name: F9B8F12FCADB043ABDCA8BD7D0C8E1F4.mlw
sha1: 2f4784905e111acd00c99fba089dbf2ac2b154b2
sha256: 5ed7e9c7e5d1f830a3dfca75fdce65e30846c792ba0ca262b8e973fb273d5b5f
sha512: 8502ee1df0fb2428ca5914e3450a183ae05ae7b9d1ff5922a9488f671e7cf0dd0199d08b6f7542f20a403f62cb719d85d7b492e20aa0b3ad3db4ed188c89e92a
ssdeep: 1536:0DXXQ0m2Wsj2CUveox6wWexvUExV4OJ/HknBkK/:0DXjm2nj2CUmoxnUExV4OJ/HknBkK/
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2016
Assembly Version: 1.0.0.0
InternalName: Spoof_dogs.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: Spoof_dogs
ProductVersion: 1.0.0.0
FileDescription: Spoof_dogs
OriginalFilename: Spoof_dogs.exe

MSILPerseus.36288 also known as:

LionicTrojan.Win32.Crypren.j!c
DrWebTrojan.Encoder.5430
ALYacGen:Variant.MSILPerseus.36288
CylanceUnsafe
ZillyaTrojan.Crypren.Win32.324
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_70% (D)
AlibabaRansom:Win32/Crypren.d51737f6
K7GWTrojan ( 005029281 )
K7AntiVirusTrojan ( 005029281 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Filecoder.BX
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 99)
KasperskyTrojan-Ransom.Win32.Crypren.aczj
BitDefenderGen:Variant.MSILPerseus.36288
NANO-AntivirusTrojan.Win32.Encoder.eflymv
MicroWorld-eScanGen:Variant.MSILPerseus.36288
TencentWin32.Trojan.Crypren.Efum
Ad-AwareGen:Variant.MSILPerseus.36288
SophosGeneric ML PUA (PUA)
ComodoMalware@#zbna7a7w015d
BitDefenderThetaGen:NN.ZemsilF.34110.em0@aukL!ye
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.f9b8f12fcadb043a
EmsisoftGen:Variant.MSILPerseus.36288 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1100992
eGambitUnsafe.AI_Score_99%
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftBackdoor:Win32/Bladabindi!ml
GDataGen:Variant.MSILPerseus.36288
AhnLab-V3Trojan/Win32.Crypren.C1749928
McAfeeArtemis!F9B8F12FCADB
MAXmalware (ai score=83)
PandaTrj/GdSda.A
YandexTrojan.Crypren!KxVNiBeJW3M
IkarusTrojan.Ransom.7h9r
MaxSecureTrojan.Malware.99575348.susgen
FortinetW32/Crypren.ACZJ!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove MSILPerseus.36288?

MSILPerseus.36288 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment