About "Mal/Generic-R + Troj/Kryptik-SL" infection

The Mal/Generic-R + Troj/Kryptik-SL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-R + Troj/Kryptik-SL virus can do?

Creates RWX memory
A process attempted to delay the analysis task.
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

edgedl.gvt1.com

update.googleapis.com

How to determine Mal/Generic-R + Troj/Kryptik-SL?


File Info:
crc32: 93F9BB78
md5: 6ec9299e208314554a41a24eec6035c4
name: 6EC9299E208314554A41A24EEC6035C4.mlw
sha1: fc06b6243d7cc4bb168ef5e1fbcb54f9a667e53a
sha256: f3479283e386b944f842855f523933896cc7266e4860b75260eae3269eba8a69
sha512: 51df1f172b9175cc0398237d1146d3582ba495b15db83f26c85f5f745031f0ece29c767a2a6e0544fbdad16469ca4ea4381483d706f1b84d2452bfbce4aac9b6
ssdeep: 12288:u7j6Jnl5ATODm75gXEtaXfevEXsHcvZfbSBrr+lFELZl8:u7j4nsTODm75IWaXXAcvlbSB8u
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018-2021 Dietary fiber
Assembly Version: 0.9.7.0
InternalName: Lx645Sbx5e0cBx5b598x62bx671b.exe
FileVersion: 0.9.7.0
CompanyName: Dietary fiber
LegalTrademarks: 
Comments: Total Carbohydrate
ProductName: Crackers Cholesterol
ProductVersion: 0.9.7.0
FileDescription: Crackers Cholesterol
OriginalFilename: Lx645Sbx5e0cBx5b598x62bx671b.exe

Mal/Generic-R + Troj/Kryptik-SL also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.36325174
Qihoo-360	Win32/Trojan.Generic.HgIASOwA
McAfee	RDN/Generic.grp
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005779901 )
BitDefender	Trojan.GenericKD.36325174
K7GW	Trojan ( 005779901 )
Cyren	W32/MSIL_Kryptik.DBG.gen!Eldorado
Symantec	Trojan Horse
ESET-NOD32	a variant of MSIL/Kryptik.ZPS
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Trojan.MSIL.Crypt.gen
Alibaba	Trojan:Win32/starter.ali1000139
ViRobot	Trojan.Win32.Z.Kryptik.613888.K
AegisLab	Trojan.Win32.Malicious.4!c
Rising	Trojan.Kryptik!8.8 (CLOUD)
Ad-Aware	Trojan.GenericKD.36325174
Emsisoft	Trojan.GenericKD.36325174 (B)
F-Secure	Trojan.TR/AD.Nanocore.nlpkl
DrWeb	Trojan.Inject4.7107
TrendMicro	TROJ_FRS.0NA103BC21
McAfee-GW-Edition	BehavesLike.Win32.Generic.hc
FireEye	Generic.mg.6ec9299e20831455
Sophos	Mal/Generic-R + Troj/Kryptik-SL
SentinelOne	Static AI – Malicious PE
Avira	TR/AD.Nanocore.nlpkl
MAX	malware (ai score=85)
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:MSIL/AgentTesla.MTQ!MTB
Gridinsoft	Trojan.Win32.Kryptik.oa
Arcabit	Trojan.Generic.D22A4736
AhnLab-V3	Malware/Gen.RL_Reputation.C4331136
ZoneAlarm	HEUR:Trojan.MSIL.Crypt.gen
GData	MSIL.Trojan.PSE.UY44SW
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.36325174
Malwarebytes	Trojan.MalPack
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_FRS.0NA103BC21
Yandex	Trojan.AvsArher.bSIdr7
Ikarus	Trojan.MSIL.Inject
Fortinet	MSIL/GenKryptik.FBPG!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)
MaxSecure	Trojan.Malware.300983.susgen

How to remove Mal/Generic-R + Troj/Kryptik-SL?

Mal/Generic-R + Troj/Kryptik-SL removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Mal/Generic-R + Troj/Kryptik-SL” infection