What is "MSIL/Kryptik.NEA"?

The MSIL/Kryptik.NEA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Kryptik.NEA virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/Kryptik.NEA?


File Info:
crc32: C3538C99
md5: 45b21e78830c86d206239aead650dce8
name: 45B21E78830C86D206239AEAD650DCE8.mlw
sha1: 7f7df4afc7d85299845e72ad6b03621399988055
sha256: 5f30fd7b783aecda537d538ebe8ba6ee30384bd0e4b8477a88305843f4f26c23
sha512: da7f42cedfaae0d738b445d4329806b53d543563382bec49bfb0151b7fc0283e6c9481d9423bae2f3936dc9798f6ac0a4b22093ac7bcabc8c51825db88000eec
ssdeep: 384:MzQBWU9mHd/N2oFmydpOp7Kdw+NPbaC0IDrLWBC0W:MsC/I0pOgdxbaC0I33
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: WUDFHost.exe
FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 10.0.14393.0
FileDescription: Windows Driver Foundation - User-mode Driver Framework Host Process
OriginalFilename: WUDFHost.exe
Translation: 0x0409 0x04b0

MSIL/Kryptik.NEA also known as:

K7AntiVirus	Trojan ( 005131db1 )
Lionic	Trojan.Win32.Generic.4!c
ALYac	IL:Trojan.MSILZilla.7001
Cylance	Unsafe
Sangfor	Trojan.Win32.Generic.8
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:MSIL/Kryptik.89fb452f
K7GW	Trojan ( 005131db1 )
Cybereason	malicious.8830c8
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.NEA
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Packed.Malwarex-6866182-0
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	IL:Trojan.MSILZilla.7001
NANO-Antivirus	Trojan.Win32.Mlw.erutds
MicroWorld-eScan	IL:Trojan.MSILZilla.7001
Tencent	Win32.Trojan.Dropper.Pdwc
Ad-Aware	IL:Trojan.MSILZilla.7001
Sophos	Mal/Generic-S
Comodo	TrojWare.MSIL.Kryptik.NE@81eks7
BitDefenderTheta	Gen:NN.ZemsilF.34266.am1@ammCD7pi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0GKE21
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.45b21e78830c86d2
Emsisoft	IL:Trojan.MSILZilla.7001 (B)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Trojan.Gen
Avira	TR/Dropper.Gen
eGambit	Unsafe.AI_Score_91%
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Skeeyah.A!rfn
GData	IL:Trojan.MSILZilla.7001
McAfee	Artemis!45B21E78830C
MAX	malware (ai score=100)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0GKE21
Ikarus	Trojan.MSIL.Injector
Fortinet	MSIL/Kryptik.NEA!tr
AVG	Win32:Malware-gen

How to remove MSIL/Kryptik.NEA?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “MSIL/Kryptik.NEA”?