Categories: Malware

Should I remove “MSIL/Kryptik.PSH”?

The MSIL/Kryptik.PSH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Kryptik.PSH virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.PSH?


File Info:
crc32: 3805EF60md5: accfe30c626bca4647a850b19e29484ename: ACCFE30C626BCA4647A850B19E29484E.mlwsha1: dd159eb09ce4e4e05172731fa6de2c27216a7bf6sha256: 03199cf584beb2d9e3880b2ba67d69543e359f524e1c514be9e7d41905f6e58csha512: 6bac35872c002d21ffd1d412dffa5f09d44340d8046d8ab73bf3489d8db1496cb5d0289287fd914429dac03c4fc18028947dd69f45caa7609d7bff53232f6391ssdeep: 12288:jStQ9isLTpJ1fTw6jKGnEjhNjzx7SJXgYi:2tHmtJVN+Yo74qtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: x52a1x656cx5c0ax7684 x662fx884cx662fx91d1x987ex5546x987ex5408Assembly Version: 0.0.0.0InternalName: ggg.exeFileVersion: 4.3.4.1CompanyName: x6c0fx5b59x7684x91d1x5bb6 x6267x9996x987ex53f8x4ebax592ax7ba1x671bx6267LegalTrademarks: x6cd5x4efbx7ba1x7684 x7684x5e0cx63a5x7684x884cx592ax7fbdComments: x91d1x6210x5b50x987e x5bb6x53f8x6210x987ex4efbx5bfcProductName: x5b98x5979x5546x91d1x6210x5b50x7ee7x4ebax5546 x671bx4ebax6cd5x671bx6210x987ex52a1ProductVersion: 4.3.4.1FileDescription: x662fx57cex751fx9996x662f x5546x5c0ax5408x6cfdx7ba1x5e0cOriginalFilename: ggg.exe

MSIL/Kryptik.PSH also known as:

K7AntiVirus	Trojan ( 0053e1721 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.36724166
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.3065441
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:MSIL/Kryptik.eb98d1eb
K7GW	Trojan ( 0053e1721 )
Cybereason	malicious.09ce4e
Cyren	W32/MSIL_Agent.BEG.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.PSH
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	HEUR:Trojan-Ransom.MSIL.Blocker.gen
BitDefender	Trojan.GenericKD.36724166
MicroWorld-eScan	Trojan.GenericKD.36724166
Ad-Aware	Trojan.GenericKD.36724166
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34690.Gq0@aGBOjMc
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_Blocker.R067C0PDL21
McAfee-GW-Edition	RDN/Generic.dx
FireEye	Generic.mg.accfe30c626bca46
Emsisoft	Trojan.GenericKD.36724166 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Tiggre!rfn
Arcabit	Trojan.Generic.D2305DC6
AegisLab	Trojan.MSIL.Blocker.j!c
GData	Trojan.GenericKD.36724166
AhnLab-V3	Trojan/Win.Generic.C4424279
McAfee	RDN/Generic.dx
MAX	malware (ai score=82)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_Blocker.R067C0PDL21
Rising	Dropper.Generic!8.35E (TFE:dGZlOgymEgajoLxiaQ)
Yandex	Trojan.Kryptik!NjS89A/Z9qs
Ikarus	Trojan.MSIL.Crypt
Fortinet	W32/Blocker.PSH!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml