Should I remove “MSIL.Crypt.16 (B)”?

Malware Removal

The MSIL.Crypt.16 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

ribbon

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
THANK YOU!
DOWNLOAD NOW
On Going Offer

What MSIL.Crypt.16 (B) virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Steals private information from local Internet browsers
  • Network activity detected but not expressed in API logs
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Harvests credentials from local FTP client softwares
  • Harvests information related to installed mail clients

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine MSIL.Crypt.16 (B)?


File Info:

crc32: 26FF3E82
md5: 309ace2ac7606a1f061780c588a12585
name: poo.exe
sha1: 0ca3ab5bbef7cf294448118965b5a6a13ce4c2f5
sha256: f8c6fa5f9549f1e041c342f16a652d1f96fa9c5c5778f7617640d80cbeb69c1b
sha512: 885e8c340ed1d613a234de9842a95dccca41dd50a130ab86a0f498394b30d128762859e3e662abfea2a1e44dad035519d81bcbe195851cf460bd89f60f74ba00
ssdeep: 6144:BSzhkGVQXDr+PhUEVmfQRkpHnv0Gwu5rYrbEo:BSVgX3YhtMFM
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: zShQVuHyozCUGIDUGXrHYbayetYKHD.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: zShQVuHyozCUGIDUGXrHYbayetYKHD.exe

MSIL.Crypt.16 (B) also known as:

DrWebTrojan.PWS.Siggen2.39431
MicroWorld-eScanGen:Variant.Razy.577898
FireEyeGeneric.mg.309ace2ac7606a1f
McAfeeGenericRXJD-PX!309ACE2AC760
MalwarebytesTrojan.MalPack.MSIL
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.MSIL.Agensla.i!c
SangforMalware
K7AntiVirusSpyware ( 004bf53c1 )
BitDefenderGen:Variant.Razy.577898
K7GWSpyware ( 004bf53c1 )
Cybereasonmalicious.ac7606
BitDefenderThetaAI:Packer.2457EE1420
CyrenW32/Trojan.QAGM-6562
SymantecTrojan Horse
APEXMalicious
AvastWin32:PWSX-gen [Trj]
GDataGen:Variant.Razy.577898
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
AlibabaBackdoor:MSIL/Remcos.870cdfa6
NANO-AntivirusTrojan.Win32.Razy.gjrqys
ViRobotTrojan.Win32.Z.Spy.289280
RisingSpyware.AgentTesla!1.B864 (CLASSIC)
Ad-AwareGen:Variant.Razy.577898
SophosMal/Generic-S
ComodoMalware@#3lt3fwvd8pp7t
F-SecureTrojan.TR/Dropper.Gen
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.MSIL.Crypt.16 (B)
IkarusTrojan.MSIL.Spy
JiangminTrojan.PSW.MSIL.mxz
WebrootW32.Trojan.TR.Dropper
AviraTR/Dropper.Gen
Endgamemalicious (high confidence)
ArcabitTrojan.Razy.D8D16A
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agensla.gen
MicrosoftBackdoor:MSIL/Remcos!MTB
AhnLab-V3Trojan/Win32.AgentTesla.C3450450
ALYacGen:Variant.Razy.577898
MAXmalware (ai score=88)
CylanceUnsafe
PandaGeneric Malware
ESET-NOD32a variant of MSIL/Spy.Agent.AES
TrendMicro-HouseCallTROJ_GEN.R002C0DKT19
SentinelOneDFI – Malicious PE
FortinetMSIL/Spy.AES!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Trojan.PSW.374

How to remove MSIL.Crypt.16 (B)?

MSIL.Crypt.16 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment