RiskTool.MSIL.PCOptimizer.ji removal instruction

The RiskTool.MSIL.PCOptimizer.ji is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What RiskTool.MSIL.PCOptimizer.ji virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Guard pages use detected – possible anti-debugging.
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Authenticode signature is invalid
• Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
• Collects and encrypts information about the computer likely to send to C2 server
• Installs itself for autorun at Windows startup
• Uses suspicious command line tools or Windows utilities

How to determine RiskTool.MSIL.PCOptimizer.ji?

File Info:
name: DE20D475AAB28A2167BB.mlw
path: /opt/CAPEv2/storage/binaries/152d8011ba1f7781318c93bb999eeb940e29e122189103d7f43814d2be5f75f3
crc32: C0F11C27
md5: de20d475aab28a2167bbae6a79ac164e
sha1: 0f18fc0c0261481d5b7c35904060f6651dae2687
sha256: 152d8011ba1f7781318c93bb999eeb940e29e122189103d7f43814d2be5f75f3
sha512: fea3602a5c1316f53a29b540946420566368e20d35a4b0cb6d027ee8494da4cf3226e40f7e09550ef38f4c9ec70421462308e99ea33241ecc0d3bf3a8ce5c069
ssdeep: 49152:eAhcArtq6X19hy9YruWVkxKTg2BRVYQqSlQs:JcAr909YzyYZBRuQqut
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T101A5335B32B2DAB3EA558F726D01A3754FBBD720C0924176AB283FE6C4815513B533CA
sha3_384: 63a6700cfa66728b50a7bb124cc75f715e9fd23508cbd6ccffb88a5613df30a248ecba7fbbcc77d3ff9d4d8461ceab75
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:50:46

Version Info:
0: [No Data]

RiskTool.MSIL.PCOptimizer.ji also known as:

How to remove RiskTool.MSIL.PCOptimizer.ji?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.