Malware

About “Mal/Generic-S + Troj/Kryptik-ON” infection

Malware Removal

The Mal/Generic-S + Troj/Kryptik-ON is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mal/Generic-S + Troj/Kryptik-ON virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Mal/Generic-S + Troj/Kryptik-ON?


File Info:

crc32: E73F8CD9
md5: d04a41ee06ab6fc25199669a8bcc4de6
name: D04A41EE06AB6FC25199669A8BCC4DE6.mlw
sha1: 1fa086cb7cac782a8f24a4dc2affc1a9f795b3eb
sha256: 09935ee6c460795aa349ba6af07059eb2619fbd1bacdf702b9280895bbef85c0
sha512: 2a5235acdf01282bc1dc89afd7dfb294f9e2555ecfb48fbf2bef9531c8ea80199fa4ea403044d8e58068e8167a91ddfc3d6257757d470198cfe4e5cf309047af
ssdeep: 12288:1z04wK/vjFSFH4BpKQjaEAHngc3MjiUYgntWZjbXN+EFgCHFCapt:2nK/vpyYBoxHgc3segn0j5+EFgClB
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2015
Assembly Version: 1.0.0.0
InternalName: px643.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: Inventory_management_system
ProductVersion: 1.0.0.0
FileDescription: Inventory_management_system
OriginalFilename: px643.exe

Mal/Generic-S + Troj/Kryptik-ON also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Bulz.248188
FireEyeGeneric.mg.d04a41ee06ab6fc2
ALYacGen:Variant.Bulz.248188
CylanceUnsafe
AegisLabTrojan.MSIL.Androm.m!c
BitDefenderGen:Variant.Bulz.248188
K7GWTrojan ( 0057429c1 )
CrowdStrikewin/malicious_confidence_60% (W)
CyrenW32/MSIL_Kryptik.UR.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:PWSX-gen [Trj]
KasperskyHEUR:Backdoor.MSIL.Androm.gen
AlibabaTrojan:MSIL/AgentTesla.c2032f51
ViRobotTrojan.Win32.Z.Kryptik.900096.AW
Ad-AwareGen:Variant.Bulz.248188
EmsisoftGen:Variant.Bulz.248188 (B)
Comodo.UnclassifiedMalware@0
F-SecureTrojan.TR/Kryptik.nwkgs
DrWebTrojan.InjectNET.14
VIPRETrojan.Win32.Generic.pak!cobra
TrendMicroTrojan.MSIL.LOKI.TIOIBYPA
McAfee-GW-EditionPWS-FCTQ!D04A41EE06AB
SophosMal/Generic-S + Troj/Kryptik-ON
IkarusWin32.SuspectCrc
JiangminBackdoor.MSIL.dzlj
WebrootW32.Trojan.Gen
AviraTR/Kryptik.nwkgs
KingsoftWin32.Hack.Undef.(kcloud)
MicrosoftTrojan:MSIL/AgentTesla.FW!MTB
ArcabitTrojan.Bulz.D3C97C
ZoneAlarmHEUR:Backdoor.MSIL.Androm.gen
GDataGen:Variant.Bulz.248188
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.Generic.R117921
McAfeePWS-FCTQ!D04A41EE06AB
MAXmalware (ai score=88)
MalwarebytesTrojan.MalPack
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Kryptik.YXA
TrendMicro-HouseCallTrojan.MSIL.LOKI.TIOIBYPA
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_92%
FortinetMSIL/Kryptik.YXA!tr
AVGWin32:PWSX-gen [Trj]
Cybereasonmalicious.b7cac7
Paloaltogeneric.ml
Qihoo-360Generic/Backdoor.9cf

How to remove Mal/Generic-S + Troj/Kryptik-ON?

Mal/Generic-S + Troj/Kryptik-ON removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment