Malware

About “MSIL/Kryptik.MRR” infection

Malware Removal

The MSIL/Kryptik.MRR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Kryptik.MRR virus can do?

  • The binary likely contains encrypted or compressed data.

How to determine MSIL/Kryptik.MRR?


File Info:

crc32: F6FDC0E4
md5: 907bffd1d4f0d4c8470ac7668750240f
name: 907BFFD1D4F0D4C8470AC7668750240F.mlw
sha1: c4b21f2294af3a4aea14b544b25b503b53d113c1
sha256: 2744b20dc22002d31b0854ce8e043e6a560b77bd6e18db810c367a1082f06842
sha512: 0f7398f31af9d0775bbedda1dc7fc217a1afd8f1537321d9782b322376c428b19abb3276e3523b4886fe960fe6bf6c101b0aecaa2f7edc316a6b0812182a32bd
ssdeep: 1536:1eC3G4/cYFDPwwiBqp0+98Qk3QofaGZRK8DCt:rLe9Bc9u3QofaGCeCt
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Future For Computer 2018
Assembly Version: 1.0.0.0
InternalName: rusi1.exe
FileVersion: 1.0.0.0
CompanyName: Future For Computer
ProductName: rusi1
ProductVersion: 1.0.0.0
FileDescription: rusi1
OriginalFilename: rusi1.exe

MSIL/Kryptik.MRR also known as:

K7AntiVirusTrojan ( 00525cf11 )
LionicTrojan.Win32.Generic.lLqd
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
ALYacGen:Variant.Razy.773910
CylanceUnsafe
ZillyaTrojan.HydraPOS.Win32.10
SangforTrojan.MSIL.HydraPOS.fc
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:MSIL/HydraPOS.8697c187
K7GWTrojan ( 00525cf11 )
Cybereasonmalicious.1d4f0d
CyrenW32/MSIL_Kryptik.DSR.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Kryptik.MRR
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Trojan.Bladbindi-1
KasperskyTrojan.MSIL.HydraPOS.fc
BitDefenderGen:Variant.Razy.773910
NANO-AntivirusTrojan.Win32.HydraPOS.exolua
ViRobotTrojan.Win32.Z.Razy.90112.DAC
MicroWorld-eScanGen:Variant.Razy.773910
TencentMsil.Trojan.Hydrapos.Hrex
Ad-AwareGen:Variant.Razy.773910
SophosMal/Generic-S
ComodoMalware@#qezd7e3ammmi
BitDefenderThetaGen:NN.ZemsilF.34236.fm0@aGJSxCf
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PJT21
McAfee-GW-EditionBehavesLike.Win32.Trojan.mc
FireEyeGeneric.mg.907bffd1d4f0d4c8
EmsisoftGen:Variant.Razy.773910 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.MSIL.imwz
AviraHEUR/AGEN.1137315
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.245735A
MicrosoftBackdoor:MSIL/Bladabindi
ArcabitTrojan.Razy.DBCF16
GDataGen:Variant.Razy.773910
McAfeeGeneric.dqr
MAXmalware (ai score=86)
VBA32Trojan.MSIL.HydraPOS
MalwarebytesMachineLearning/Anomalous.97%
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0PJT21
YandexTrojan.HydraPOS!bX/LODx19fY
IkarusTrojan.MSIL.Zapchast
MaxSecureTrojan.Malware.300983.susgen
FortinetPossibleThreat
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove MSIL/Kryptik.MRR?

MSIL/Kryptik.MRR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment