MSIL/GenKryptik.ENGK malicious file

The MSIL/GenKryptik.ENGK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/GenKryptik.ENGK virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/GenKryptik.ENGK?


File Info:
crc32: 9419B126
md5: 1cf52cbba2b039235fc1a6a96c6cccb8
name: ds1.exe
sha1: 22cff2a8ab6b0bc4238eac660ac55be072646754
sha256: 8504f0e3b8db639eaeacca5ccbe9f53cc405d7df7b8b4f456aa9d89bee92c6c6
sha512: d1c54a135a246d99d55ca290ea2cdc4e8c559a19635040e518336670701fa74cbe38102c119377ca720f55f30d4dd25db153d0b5a4f12e3c7dc264ab3ba658d8
ssdeep: 3072:cz2FDpnaG6rHD2ubGYlaV2ls3XTQKsthMoGZmMshDBMMZKle:GGYj2ubGiaV2losPthMXshNr
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2012
Assembly Version: 0.1.6.0
InternalName: SJpRUVVOvPICTNHtKnc.exe
FileVersion: 0.1.6.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: BB.Common.WinForms
ProductVersion: 0.1.6.0
FileDescription: BB.Common.WinForms
OriginalFilename: SJpRUVVOvPICTNHtKnc.exe

MSIL/GenKryptik.ENGK also known as:

McAfee	Fareit-FVR!1CF52CBBA2B0
Cylance	Unsafe
Cybereason	malicious.8ab6b0
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
GData	Win32.Trojan.KillCmstp.LBQLIM
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
AegisLab	Trojan.MSIL.Agensla.i!c
Avira	TR/Redcap.ozgtw
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Agensla.gen
Microsoft	Trojan:MSIL/SchInject.VN!MTB
ESET-NOD32	a variant of MSIL/GenKryptik.ENGK
TrendMicro-HouseCall	TROJ_GEN.R002H01FS20
Rising	Trojan.SchInject!8.11D4A (CLOUD)
SentinelOne	DFI – Malicious PE
AVG	Win32:TrojanX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)

How to remove MSIL/GenKryptik.ENGK?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSIL/GenKryptik.ENGK malicious file