Malware

Should I remove “PWS:MSIL/Mintluks!pz”?

Malware Removal

The PWS:MSIL/Mintluks!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PWS:MSIL/Mintluks!pz virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous .NET characteristics
  • Deletes executed files from disk

How to determine PWS:MSIL/Mintluks!pz?


File Info:

name: 98575838C14E27F1B322.mlw
path: /opt/CAPEv2/storage/binaries/d21dbc9c809015b6022ddf9e8a0505562a7e1293ac0fca37c676a713ce7599e4
crc32: E07D378E
md5: 98575838c14e27f1b3221619fc2c5a69
sha1: 6999cf520b3bdaa5fd4a81710027c366507eb159
sha256: d21dbc9c809015b6022ddf9e8a0505562a7e1293ac0fca37c676a713ce7599e4
sha512: 35633bf00747be45e2a61fccb81c17a57eb4fa4530471c49435a53a03ff5129355d0577fbadf6ee436c84e9b6c689913f74b5b4d1cb55a5a87e58a38d3c11f33
ssdeep: 1536:mPWtHFo6M3xXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQte9/+11r:mPWtHFon3xSyRxvY3md+dWWZye9/i
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B573CF11BF812E48E7F91B3316EC25D606AFBB4E9DB097CB682D89D84F37A4084D0758
sha3_384: bc6f035f242197d93a76683cc4b4d2b3c22f727b88617ef55fe9bd0fcd3a39868dc02e668d2b66b101435004645935d8
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-08-04 07:51:47

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: tmp7736.tmp.exe
LegalCopyright:
OriginalFilename: tmp7736.tmp.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

PWS:MSIL/Mintluks!pz also known as:

LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanIL:Trojan.MSILZilla.21585
CAT-QuickHealTrojan.Generic.TRFH959
SkyhighBehavesLike.Win32.Generic.lc
McAfeeGenericRXDE-PH!98575838C14E
Cylanceunsafe
VIPREIL:Trojan.MSILZilla.21585
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0056ae4d1 )
AlibabaTrojanPSW:MSIL/Mintluks.fb4fbb07
K7GWTrojan ( 005690671 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaGen:NN.ZemsilF.36792.em0@aeY7DZh
VirITTrojan.Win32.Dnldr8.BVXD
SymantecMSIL.Packed.13
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/Kryptik.MSS
APEXMalicious
ClamAVWin.Malware.Avlj-9877624-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderIL:Trojan.MSILZilla.21585
NANO-AntivirusTrojan.Win32.Generic.euparm
AvastWin32:Agent-AVLJ [Trj]
RisingBackdoor.njRAT!1.AE81 (CLASSIC)
EmsisoftIL:Trojan.MSILZilla.21585 (B)
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.DownLoader7.54184
ZillyaTrojan.AgentGen.Win32.91
TrendMicroTROJ_MINTLUKS.SM
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.98575838c14e27f1
SophosMal/MSIL-TU
IkarusTrojan.Dropper
MAXmalware (ai score=89)
GDataMSIL.Trojan.PSE.108SVUU
JiangminTrojanDropper.Injector.ioj
GoogleDetected
AviraTR/Dropper.Gen
VaristW32/MSIL_Kryptik.AZD.gen!Eldorado
Antiy-AVLTrojan/Win32.AGeneric
Kingsoftmalware.kb.c.1000
XcitiumTrojWare.MSIL.Mintluks.JJC@7axq6t
ArcabitIL:Trojan.MSILZilla.D5451
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftPWS:MSIL/Mintluks!pz
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Injector.R345010
VBA32OScope.TrojanDropper.MSIL.Mintluks
TACHYONTrojan/W32.DN-Agent.80384.BW
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_MINTLUKS.SM
TencentTrojan.MSIL.Zilla.ha
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Kryptik.JJC!tr
AVGWin32:Agent-AVLJ [Trj]
Cybereasonmalicious.20b3bd
DeepInstinctMALICIOUS

How to remove PWS:MSIL/Mintluks!pz?

PWS:MSIL/Mintluks!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment