PWS:MSIL/Mintluks!pz removal guide

The PWS:MSIL/Mintluks!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PWS:MSIL/Mintluks!pz virus can do?

• Behavioural detection: Executable code extraction – unpacking
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Anomalous .NET characteristics
• Compiles .NET code into an executable and executes it
• CAPE detected the embedded pe malware family
• Deletes executed files from disk
• Yara detections observed in process dumps, payloads or dropped files

How to determine PWS:MSIL/Mintluks!pz?

File Info:
name: 008A22D891A8F834AFE7.mlw
path: /opt/CAPEv2/storage/binaries/8596e1429b96eb7330031b2be97845e45c86796ed4c902a705349570a79b630d
crc32: 23007A15
md5: 008a22d891a8f834afe778facb62a22a
sha1: 9d2bd83bb04612c5013a8eb5d896ea0b8639e8e0
sha256: 8596e1429b96eb7330031b2be97845e45c86796ed4c902a705349570a79b630d
sha512: 091c1ad22ad326714ed3fdbf167d1f9a434ca4375f18a27962a6e940e93036a2629acf3a2df12436ee8ff7b548dcf026828aea17f31043d2381323bc70ee7f72
ssdeep: 1536:jRCHH638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQten9/21px:jRCHa3Ln7N041Qqhgen9/M
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F973CF15AF410D08E7F80B3205DC26DA06BFFB4EEA7053CA5D5E69A82B37B9055E0764
sha3_384: 5043b8e68e8d3215a24f01891a172d777562220e876bae4343ca6fa715e9b596d2711cefb77f56167eece59e01c63d32
ep_bytes: ff250020400000000000000000000000
timestamp: 2020-05-25 17:39:41

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: tmp67B7.tmp.exe
LegalCopyright:  
OriginalFilename: tmp67B7.tmp.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

PWS:MSIL/Mintluks!pz also known as:

How to remove PWS:MSIL/Mintluks!pz?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.