Categories: Malware

MSIL/Kryptik.QXC removal

The MSIL/Kryptik.QXC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Kryptik.QXC virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Creates a copy of itself

How to determine MSIL/Kryptik.QXC?


File Info:
crc32: 4000E221md5: 975baa6ed92898364533371a92685983name: 975BAA6ED92898364533371A92685983.mlwsha1: b66dbba806e3078c024622fe53cfde7f63d81772sha256: 1981fc87e8cc05875a1ad7b1dc1ce1ced86f839ba1d2342d992a4312003cd687sha512: 7d9ce6a46f67b0d60b5be0b4286df125c9bc4f9a9e0bf5445d11e4d519dd84351a7ee0ca2b499350fd2b5c19b0eef330ebca499f8e57d9bf284e76bccda276f3ssdeep: 3072:sBxQNICkkkkkkkkkkkkkkAXlJlDz8baRYEAzLbW4W3Rm2zAumoBnAbrHY:s8NnkkkkkkkkkkkkkkFWkzMAtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: Copyright xa9  2018Assembly Version: 1.0.0.0InternalName: winlogon.exeFileVersion: 1.0.0.0ProductName: winlogonProductVersion: 1.0.0.0FileDescription: winlogonOriginalFilename: winlogon.exe

MSIL/Kryptik.QXC also known as:

K7AntiVirus	Trojan ( 0051d1681 )
Lionic	Trojan.MSIL.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	BackDoor.Bladabindi.13678
Cynet	Malicious (score: 100)
ALYac	Gen:Heur.MSIL.Krypt.!cdmip!.2
Cylance	Unsafe
Sangfor	Trojan.MSIL.Agent.gen
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:MSIL/GenKryptik.6a851e15
K7GW	Trojan ( 0051d1681 )
Cybereason	malicious.ed9289
Cyren	W32/Johnnie.H.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.QXC
APEX	Malicious
Avast	MSIL:Agent-AEM [Trj]
ClamAV	Win.Packed.DarkComet-9811597-1
Kaspersky	HEUR:Trojan.MSIL.Agent.gen
BitDefender	Gen:Heur.MSIL.Krypt.!cdmip!.2
NANO-Antivirus	Trojan.Win32.GenKryptik.ffihgg
MicroWorld-eScan	Gen:Heur.MSIL.Krypt.!cdmip!.2
Tencent	Msil.Trojan.Agent.Htcd
Ad-Aware	Gen:Heur.MSIL.Krypt.!cdmip!.2
Sophos	ML/PE-A
Comodo	Malware@#1ap09zrysr138
BitDefenderTheta	Gen:NN.ZemsilF.34266.pq0@amuaYUh
TrendMicro	TROJ_GEN.R002C0PJV21
McAfee-GW-Edition	GenericRXEU-KE!975BAA6ED928
FireEye	Generic.mg.975baa6ed9289836
Emsisoft	Gen:Heur.MSIL.Krypt.!cdmip!.2 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1138291
eGambit	Unsafe.AI_Score_69%
Antiy-AVL	Trojan/Generic.ASMalwS.270965F
Microsoft	Backdoor:MSIL/Bladabindi
Arcabit	Trojan.MSIL.Krypt.!cdmip!.2
GData	Gen:Heur.MSIL.Krypt.!cdmip!.2
McAfee	GenericRXEU-KE!975BAA6ED928
MAX	malware (ai score=99)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Trojan.Crypt.MSIL
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PJV21
Ikarus	Trojan.MSIL.Krypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.QXC!tr
AVG	MSIL:Agent-AEM [Trj]
Paloalto	generic.ml