About “MSIL/GenKryptik.EWFT” infection

The MSIL/GenKryptik.EWFT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/GenKryptik.EWFT virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSIL/GenKryptik.EWFT?


File Info:
crc32: 18E19101
md5: e9f04bbd5428422643901bbdbe8bd3bf
name: E9F04BBD5428422643901BBDBE8BD3BF.mlw
sha1: 3c33f938cd57d8ac2433068252c2330d1ce510b9
sha256: d365a8242fb16dd10dc6a80f41740c4b96d60090621d7f2c67d64a695fb9991a
sha512: 76785cc76010d3180f1bd8fa57f6e1e6dd7a53b78f192338c30d833282737002094b78d95c04ebda7d62a4d372bd2dfde2c68859b344d34e4190932adc94f833
ssdeep: 49152:HNQvTSf5ajgIBs9cyKLlwXmHzZKuVCvTSf5ajgIBs9cyK0:SWfo3MKBAmHzguVWWfo3MK0
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: xa9 SpiceBrains.com
InternalName: Instant Eyedropper
FileVersion: 1.9.1.0
CompanyName: SpiceBrains
ProductName: Instant Eyedropper
ProductVersion: 1.9.1
FileDescription: Color detection tool
OriginalFilename: instanteyedropper.exe
Translation: 0x0409 0x04e4

MSIL/GenKryptik.EWFT also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.35560280
McAfee	Artemis!E9F04BBD5428
Cylance	Unsafe
AegisLab	Trojan.Multi.Generic.4!c
Sangfor	Malware
K7AntiVirus	Trojan ( 00563cb01 )
BitDefender	Trojan.GenericKD.35560280
K7GW	Trojan ( 00563cb01 )
Arcabit	Trojan.Generic.D21E9B58
BitDefenderTheta	Gen:NN.ZemsilF.34670.@x0@ai2faxfi
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Trojan:Win32/Kryptik.ali2000016
Ad-Aware	Trojan.GenericKD.35560280
Emsisoft	Trojan.GenericKD.35560280 (B)
DrWeb	Trojan.Siggen11.54401
TrendMicro	Trojan.MSIL.MALREP.THLOEBO
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.e9f04bbd54284226
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
MAX	malware (ai score=87)
Kingsoft	Win32.Heur.KVMH008.a.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Trojan.GenericKD.35560280
ALYac	Trojan.GenericKD.35560280
ESET-NOD32	a variant of MSIL/GenKryptik.EWFT
TrendMicro-HouseCall	Trojan.MSIL.MALREP.THLOEBO
Ikarus	Trojan.MSIL.Vmprotect
Fortinet	MSIL/GenKryptik.EWFT!tr
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_60% (D)

How to remove MSIL/GenKryptik.EWFT?

MSIL/GenKryptik.EWFT removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X