PWS:MSIL/Mintluks!pz (file analysis)

The PWS:MSIL/Mintluks!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PWS:MSIL/Mintluks!pz virus can do?

• Behavioural detection: Executable code extraction – unpacking
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Anomalous .NET characteristics
• Compiles .NET code into an executable and executes it
• Deletes executed files from disk

How to determine PWS:MSIL/Mintluks!pz?

File Info:
name: 4D9BCC93931812BA8504.mlw
path: /opt/CAPEv2/storage/binaries/74cd0670085857400f22b2f95e8ecb05c378d78e2272c2c4e103960f0fa7171f
crc32: A7B17B3E
md5: 4d9bcc93931812ba850497a4c14c3856
sha1: 663d448dcf2caf2cb40dcd709f47a3b676b66d80
sha256: 74cd0670085857400f22b2f95e8ecb05c378d78e2272c2c4e103960f0fa7171f
sha512: b7f6048f0fef2c494a108202bcc159d896dbdf68521324de4d11d43720b7d326296235fafc4b86f9ea564eb26c86da446cb170010858f36e12c138fce692a1d6
ssdeep: 1536:5PCHFo6638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtN9/i1N9:5PCHFo53Ln7N041QqhgN9/w
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11173CF05AF410D08E7F80B3209DC36DA06BFFB4ED67057CA5D5E69A82B37B9059E0768
sha3_384: 831927c612f29c3a4032195d3f7b67b9f710731874c85b8d6a6d16cd105eec9f03a990da50c323062effa7dbac62215b
ep_bytes: ff250020400000000000000000000000
timestamp: 2020-07-12 04:52:33

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: tmp5530.tmp.exe
LegalCopyright:  
OriginalFilename: tmp5530.tmp.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

PWS:MSIL/Mintluks!pz also known as:

How to remove PWS:MSIL/Mintluks!pz?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.