Win32.Perenast.B malicious file

The Win32.Perenast.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32.Perenast.B virus can do?

The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs

How to determine Win32.Perenast.B?


File Info:
crc32: 5E65039A
md5: 2e250d5c61b9e1a8f9ac169a8e8a5ec5
name: 2E250D5C61B9E1A8F9AC169A8E8A5EC5.mlw
sha1: 851462c3057f85204f88571afb4f712a324ecd93
sha256: e780e75f8a5955bae414befda34f3c6e2c756449ed5365ea52b6374c792da24b
sha512: 4d2e283c5db864dc517a116446917c15a94416284f69a806379239d6187d1ac23388508f474efab14cc25b5ed102518c59772c9bbcc8ce8ac3bf7425a41733ca
ssdeep: 1536:qxeEtk0kc46GjY4+L6QzqFGYzyCQgPXvRTm/V0V3/SYrdHj6sUD2KudEmJoXRIO:zEtk2F+Y9Rki+vRa+39HsD9YuuXPVut
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: Copyright (C) Microsoft Corp. 1998
InternalName: Welcome98
FileVersion: 4.10.1998
CompanyName: Microsoft Corporation
ProductName: Microsoft(R) Windows(R) Operating System
ProductVersion: 4.10.1998
FileDescription: Windows 98 Welcome
OriginalFilename: WELCOME.EXE
Translation: 0x0409 0x04e4

Win32.Perenast.B also known as:

K7AntiVirus	Trojan ( 004830bb1 )
Lionic	Trojan.Multi.Generic.4!c
Cynet	Malicious (score: 99)
ALYac	Win32.Perenast.B
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
K7GW	Trojan ( 004830bb1 )
Cybereason	malicious.c61b9e
Cyren	W32/Stepan.E
Symantec	W32.Perenast.gen
ESET-NOD32	Win32/Stepan
APEX	Malicious
Avast	FileRepMalware
Kaspersky	HEUR:Trojan.Win32.Invader
BitDefender	Win32.Perenast.B
NANO-Antivirus	Virus.Win32.Stepar.gglb
MicroWorld-eScan	Win32.Perenast.B
Tencent	Win32.Virus.Stepan.Hryz
Ad-Aware	Win32.Perenast.B
Comodo	Malware@#32qzcjr448ycc
BitDefenderTheta	AI:FileInfector.74B5E08010
McAfee-GW-Edition	BehavesLike.Win32.Fake.nc
FireEye	Win32.Perenast.B
Emsisoft	Win32.Perenast.B (B)
Avira	W32/Stepar.D
eGambit	Unsafe.AI_Score_99%
Kingsoft	Win32.Infected.AutoInfector.a.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Win32.Perenast.B
GData	Win32.Perenast.B
McAfee	Artemis!2E250D5C61B9
MAX	malware (ai score=84)
VBA32	BScope.Worm.Stepaik
Panda	Trj/CI.A
Yandex	Win32.Stepan.14903
Ikarus	Virus.Win32.Stepan
MaxSecure	Virus.Stepar.D
Fortinet	W32/Stepan.AB@mm
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Win32.Perenast.B?

Win32.Perenast.B removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X