Categories: Malware

MSIL/Kryptik.OHT removal tips

The MSIL/Kryptik.OHT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Kryptik.OHT virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSIL/Kryptik.OHT?


File Info:
crc32: 8643A7E3md5: 1502cb8a7caf4853614f9fd8f860631ename: 1502CB8A7CAF4853614F9FD8F860631E.mlwsha1: 813dc57d206536db600a16f8a5da362240cb8516sha256: bdc5cb40d2d655865ed182688f4cb623c545dd9875c6198bf16d616e53c52eb0sha512: fa4c28bb760aabba20e7dbf98fe093687cd18c072bca07ed650c01fdee2c498bc8a89e2a6b41a6ca72762d7a2616e207562ee5f3b253fe375b8ff239294bef08ssdeep: 12288:L7VmgAiqs+Dq1eoNJjfbNsKgolRaicMH4JX9osdQIDP8mdrC+cCpPqM9:LhmgAg+DqZjqZIcMH4JFdQIT/bcw1type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: Copyright xa9 2018 Gray Computer CorporationAssembly Version: 0.0.0.0InternalName: wyt.exeFileVersion: 4.7.29.2CompanyName: Gray Computer CorporationComments: versionProductName: Recovery DirectoryProductVersion: 4.7.29.2FileDescription: Recovery DirectoryOriginalFilename: wyt.exe

MSIL/Kryptik.OHT also known as:

K7AntiVirus	Trojan ( 0053707b1 )
MicroWorld-eScan	Trojan.GenericKD.30974554
CAT-QuickHeal	Trojan.IGENERIC
ALYac	Trojan.GenericKD.30974554
Cylance	Unsafe
Zillya	Trojan.Agent.Win32.901631
CrowdStrike	malicious_confidence_100% (W)
K7GW	Trojan ( 0053707b1 )
Cybereason	malicious.d20653
TrendMicro	TROJ_GEN.R002C0OFJ18
NANO-Antivirus	Trojan.Win32.Kryptik.feheez
Cyren	W32/Trojan.QNTR-7394
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.OHT
Avast	Win32:Malware-gen
GData	Trojan.GenericKD.30974554
Kaspersky	HEUR:Trojan.MSIL.Agent.gen
BitDefender	Trojan.GenericKD.30974554
Tencent	Win32.Trojan.Inject.Auto
Ad-Aware	Trojan.GenericKD.30974554
Sophos	Mal/Generic-S
Comodo	UnclassifiedMalware
F-Secure	Trojan.GenericKD.30974554
DrWeb	Trojan.Siggen7.55833
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.bc
Emsisoft	Trojan.GenericKD.30974554 (B)
SentinelOne	static engine – malicious
Endgame	malicious (high confidence)
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1033304
Antiy-AVL	Trojan/MSIL.Agent
Microsoft	VirTool:MSIL/Injector
Arcabit	Trojan.Generic.D1D8A25A
ZoneAlarm	HEUR:Trojan.MSIL.Agent.gen
McAfee	Packed-ZI!1502CB8A7CAF
MAX	malware (ai score=97)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Trojan.PasswordStealer.MSIL
Panda	Trj/CI.A
TrendMicro-HouseCall	Trojan.MSIL.BOILOD.SM1.hp
Yandex	Trojan.Agent!oWROVsQQ5uo
Ikarus	Trojan.Inject
Fortinet	MSIL/Kryptik.OHT!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.289