What is “PWS:MSIL/Mintluks!pz”?

The PWS:MSIL/Mintluks!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PWS:MSIL/Mintluks!pz virus can do?

• Behavioural detection: Executable code extraction – unpacking
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Anomalous .NET characteristics
• Compiles .NET code into an executable and executes it
• CAPE detected the embedded pe malware family
• Deletes executed files from disk
• Yara detections observed in process dumps, payloads or dropped files

How to determine PWS:MSIL/Mintluks!pz?

File Info:
name: B40D7EFFFF3FDA27FA4E.mlw
path: /opt/CAPEv2/storage/binaries/e9d8dbc18b06eed3fabffa86d9d177b51577800c354cfe26790dfce8f46aea38
crc32: 59FAE54E
md5: b40d7effff3fda27fa4ea9e8d96bda43
sha1: 4ceedce5dda59a5f569d954de2dc51c65106c199
sha256: e9d8dbc18b06eed3fabffa86d9d177b51577800c354cfe26790dfce8f46aea38
sha512: 544081bcf5aad8f7d5ec314d95ac7ddf3c4168b5fe6ce045ecd4a5fcfa842da3e859cddfb64ae21d3b29c9fab7040ade9e11a74b4bb63548f978ecbbeea31a18
ssdeep: 1536:KRy5jldy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtC6o9/y13y:KRy5jwn7N041Qqhgg9/J
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16673CF156F910D08E7F80B3205DC35CA06BFFB4EEA7057CA5D2E65A81B37B9099E0764
sha3_384: 741846d203ee5dfbfd55bf5ed54479e80bc89712f34127078b8ce0d0e063679b07d69eaa586c166d2e3c031f1b52b74e
ep_bytes: ff250020400000000000000000000000
timestamp: 2020-07-08 18:43:57

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: tmp9F98.tmp.exe
LegalCopyright:  
OriginalFilename: tmp9F98.tmp.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

PWS:MSIL/Mintluks!pz also known as:

How to remove PWS:MSIL/Mintluks!pz?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.