About “MSIL/GenKryptik.EDXZ” infection

The MSIL/GenKryptik.EDXZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/GenKryptik.EDXZ virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSIL/GenKryptik.EDXZ?


File Info:
crc32: 45F0C4D0
md5: 41c14e12e75afab15e38586c95a801b8
name: rr1.exe
sha1: c7a526ca9eaf7eec16e6c2e00fb6a1aa506761eb
sha256: c1468a5dffc755245f57adf37ac5fcc7209802df9520c582e9a8a1a9a19b5823
sha512: d56b7ffbcf69d9a254933ef7b294095112d86d013355dea362760c4e50fe11b75c0da54dc99eda16778fad3ff14ee6d26fb632009c99dd52b23c3bacab1df122
ssdeep: 6144:pdcNgMVCnnESITFMuc1+F+yeME9eQ3XTdqEIG4C:8zgnESIT5c1+oME9ey0BG4C
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa92003 - 2019 Progress Software EAD. All rights reserved.
Assembly Version: 5.4.1.6
InternalName: FiddlerSetup.exe
FileVersion: 5.4.1.6
CompanyName: Progress Software EAD
LegalTrademarks: FiddlerSetup
Comments: Installer for Progress Telerik Fiddler Web Debugger
ProductName: Progress Telerik Fiddler Setup
ProductVersion: 5.4.1.6
FileDescription: FiddlerSetup
OriginalFilename: FiddlerSetup.exe

MSIL/GenKryptik.EDXZ also known as:

DrWeb	Trojan.Siggen9.10092
FireEye	Generic.mg.41c14e12e75afab1
Cylance	Unsafe
Sangfor	Malware
BitDefenderTheta	Gen:NN.ZemsilF.34090.vm3@aOYZXsx
Cyren	W32/MSIL_Kryptik.AFT.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Kaspersky	HEUR:Backdoor.MSIL.Remcos.gen
Trapmine	malicious.moderate.ml.score
Endgame	malicious (high confidence)
ZoneAlarm	HEUR:Backdoor.MSIL.Remcos.gen
Microsoft	Trojan:Win32/Wacatac.C!ml
Acronis	suspicious
APEX	Malicious
ESET-NOD32	a variant of MSIL/GenKryptik.EDXZ
SentinelOne	DFI – Malicious PE
Fortinet	MSIL/GenKryptik.EDXZ!tr
Qihoo-360	HEUR/QVM03.0.2B5B.Malware.Gen
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (D)

How to remove MSIL/GenKryptik.EDXZ?

MSIL/GenKryptik.EDXZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X