a variant of MSIL/Kryptik.TQI malicious file

The a variant of MSIL/Kryptik.TQI file is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What a variant of MSIL/Kryptik.TQI virus can do?

• CAPE detection: Executable code extraction
• CAPE detection: Injection (inter-process)
• CAPE detection: Injection (Process Hollowing)
• Creates RWX memory
• A process attempted to delay the analysis task.
• The binary likely contains encrypted or compressed data.
• Executed a process and injected code into it, probably while unpacking

How to determine a variant of MSIL/Kryptik.TQI?

General:
Operating System: Windows 7 / 8 / 8.1 / 10
Virus Name: Trojan.Multi.Generic.4!c


File Info:
Name: gen.exe
Size: 403968
Type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5: bf58bbbfebf105620b54e1018eef90c6
SHA1: e4284ac5f59f3f1e9c902313b571f98e32d8f47c
SH256: 86a99950da68824aa1c00acc035dc44c2496c1afc4c6060b8f34d9ab0bc26dcb
 
Version Info:
 [No Data] 

a variant of MSIL/Kryptik.TQI also known as:

ALYac	Trojan.GenericKD.42009841
APEX	Malicious
AVG	Win32:TrojanX-gen [Trj]
Acronis	suspicious
Ad-Aware	Trojan.GenericKD.42009841
AegisLab	Trojan.Multi.Generic.4!c
AhnLab-V3	Trojan/Win32.MSIL.C3562726
Alibaba	TrojanPSW:MSIL/Kryptik.49757672
Antiy-AVL	Trojan[PSW]/MSIL.Heye
Arcabit	Trojan.Generic.D28104F1
Avast	Win32:TrojanX-gen [Trj]
BitDefender	Trojan.GenericKD.42009841
BitDefenderTheta	Gen:NN.ZemsilCO8.32250.ym0@auGqCYm
CrowdStrike	win/malicious_confidence_60% (W)
Cybereason	malicious.5f59f3
Cylance	Unsafe
Cyren	W32/Ransom.AY.gen!Eldorado
DrWeb	Trojan.Siggen8.54983
ESET-NOD32	a variant of MSIL/Kryptik.TQI
Endgame	malicious (high confidence)
F-Prot	W32/Ransom.AY.gen!Eldorado
FireEye	Generic.mg.bf58bbbfebf10562
Fortinet	MSIL/Kryptik.TQI!tr
GData	Trojan.GenericKD.42009841
Ikarus	Trojan.Inject
Invincea	heuristic
K7AntiVirus	Trojan ( 0055b3dc1 )
K7GW	Trojan ( 0055b3dc1 )
Kaspersky	HEUR:Trojan-PSW.MSIL.Heye.gen
MAX	malware (ai score=100)
Malwarebytes	Trojan.Crypt.MSIL
McAfee	RDN/Generic PWS.y
McAfee-GW-Edition	BehavesLike.Win32.Generic.fc
MicroWorld-eScan	Trojan.GenericKD.42009841
Paloalto	generic.ml
Panda	Trj/GdSda.A
Qihoo-360	Win32/Trojan.PSW.ce6
Sophos	Mal/Generic-S
Symantec	ML.Attribute.HighConfidence
Trapmine	malicious.high.ml.score
TrendMicro-HouseCall	TROJ_GEN.R057C0WKD19
VIPRE	Trojan.Win32.Generic!BT
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Heye.gen

How to remove a variant of MSIL/Kryptik.TQI?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.