MSILPerseus.3737 (B) malicious file

The MSILPerseus.3737 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILPerseus.3737 (B) virus can do?

Reads data out of its own binary image
CAPE extracted potentially suspicious content
.NET file is packed/obfuscated with SmartAssembly
Authenticode signature is invalid

How to determine MSILPerseus.3737 (B)?


File Info:
name: 315D3376F57088D62388.mlw
path: /opt/CAPEv2/storage/binaries/18dcefac2f9e34ed130797c5703e7613ec4632b189dc9ed22ed74981dab0b2d1
crc32: F8D4AD89
md5: 315d3376f57088d6238852c5d2a923e9
sha1: 1136c7e03504fa18e65461f40eaa0d441fdbee77
sha256: 18dcefac2f9e34ed130797c5703e7613ec4632b189dc9ed22ed74981dab0b2d1
sha512: 9be2db875fe52eac1131837b92ad2a3ff7462032b5883b2fe2173afaeb949487f418a26e9d03baf3eb361fd0f15d9ed4680c2396eb53cb3807c6569e81a160f3
ssdeep: 6144:pmZkV2REZ8kD0khEfyXCcXoOF8MNGt9wXv:o6V3Z8Q0khEfYCcXoOF8MSw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16254562426FF5009F0F3AF711EF56ADD7E6DBA333A0AD42D1454034A8623691ED8277A
sha3_384: 1f94690cab02efb35142f47332d3d2ece710b031deaaf7fa4da7236571abae78032d8c7919f0ad1d436164eb292a504b
ep_bytes: ff254829410000005f436f724578654d
timestamp: 2015-09-08 15:01:26

Version Info:
Translation: 0x0000 0x04b0
Comments: כמהקשהחאגימיםלמדינותלאיודעים
CompanyName: मजबूतहोजाएगालेकिनयहमहत्वपूर्णहै
FileDescription: मजबूतहोजाएगालेकिनयहमहत्वपूर्णहै
FileVersion: 1.08.3.3
InternalName: Stub.exe
LegalCopyright: Copyright ©  2014
LegalTrademarks: כמהקשהחאגימיםלמדינותלאיודעים
OriginalFilename: Stub.exe
ProductName: כמהקשהחאגימיםלמדינותלאיודעים
ProductVersion: 1.08.3.3
Assembly Version: 1.9.5.4

MSILPerseus.3737 (B) also known as:

Lionic	Trojan.Win32.Generic.m2uO
MicroWorld-eScan	Gen:Variant.MSILPerseus.3737
FireEye	Generic.mg.315d3376f57088d6
ALYac	Gen:Variant.MSILPerseus.3737
Malwarebytes	Generic.Malware/Suspicious
Zillya	Trojan.Kryptik.Win32.4015777
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 0055e3981 )
Alibaba	Trojan:MSIL/Disfa.07cab7bd
K7GW	Trojan ( 0055e3981 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.Atros2.RKP
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Kryptik.AFQ
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.MSIL.Disfa.gen
BitDefender	Gen:Variant.MSILPerseus.3737
NANO-Antivirus	Trojan.Win32.Zapchast.dwxxqp
Avast	Win32:Evo-gen [Trj]
Tencent	Msil.Trojan.Disfa.Ojgl
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1310569
DrWeb	BackDoor.Bladabindi.1705
VIPRE	Gen:Variant.MSILPerseus.3737
TrendMicro	TROJ_GEN.R002C0GB123
McAfee-GW-Edition	BehavesLike.Win32.Infected.dm
Emsisoft	Gen:Variant.MSILPerseus.3737 (B)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.MSILPerseus.3737
Avira	HEUR/AGEN.1310569
Antiy-AVL	Trojan/MSIL.Kryptik
Xcitium	Malware@#20or2ejj5fkpw
Arcabit	Trojan.MSILPerseus.DE99
ZoneAlarm	HEUR:Trojan.MSIL.Disfa.gen
Microsoft	Backdoor:MSIL/Bladabindi.AJ
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win32.Genome.R119380
Acronis	suspicious
McAfee	Artemis!315D3376F570
MAX	malware (ai score=82)
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0GB123
Rising	Malware.Obfus/MSIL@AI.95 (RDM.MSIL2:2Op2lhRgjIhOlYnzbpCiJg)
Ikarus	Trojan.Msil
MaxSecure	Trojan.Malware.9556648.susgen
Fortinet	MSIL/Kryptik.AFQ!tr
BitDefenderTheta	Gen:NN.ZemsilF.36196.rm0@amH@hTl
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.6f5708
DeepInstinct	MALICIOUS

How to remove MSILPerseus.3737 (B)?

MSILPerseus.3737 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X