Malware

MSIL/Kryptik.SMT removal

Malware Removal

The MSIL/Kryptik.SMT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Kryptik.SMT virus can do?

  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

How to determine MSIL/Kryptik.SMT?


File Info:

crc32: 406E8BF3
md5: 175054bbd6951f7a34e6fc7490994bb2
name: aw4hgpo.exe
sha1: b5fbdcc8610745a5db5795cbba43301bf06ae047
sha256: a33a0c1279fe12e4d838173e90b80b5e6d59f0e0b1e9d59dd36312874ec96243
sha512: 4b432dc76b311af14c1634774659ed5a2d79fb4dfcd5afb67d5e761258011d048c451285b954b30cf376b68cd8317679f9bc97718c67932c583573b39c130feb
ssdeep: 12288:xOQezYBAkiEK/jfG3JI0YXvL7VIUMbHdX9WBRktzx4urElCccP:xczCdiEK/jGXqLhqNQAzCurrccP
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2016
Assembly Version: 0.0.0.0
InternalName: Aw4Hgpo.exe
FileVersion: 6.9.12.15
CompanyName: ?<x1e(;T!$Y;-70(
Comments: L.M?1=9PH91L
ProductName: QD#x1f9?)MFIE2P*
ProductVersion: 6.9.12.15
FileDescription: QD#x1f9?)MFIE2P*
OriginalFilename: Aw4Hgpo.exe

MSIL/Kryptik.SMT also known as:

MicroWorld-eScanTrojan.GenericKD.32349885
FireEyeGeneric.mg.175054bbd6951f7a
CAT-QuickHealTrojan.MSIL
Qihoo-360Generic/Trojan.289
ALYacSpyware.AgentTesla
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan ( 005551941 )
BitDefenderTrojan.GenericKD.32349885
K7GWTrojan ( 005551941 )
Cybereasonmalicious.861074
TrendMicroTROJ_GEN.R002C0PBA20
BitDefenderThetaGen:NN.ZemsilF.34090.Pm0@aGxgQap
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R002C0PBA20
Paloaltogeneric.ml
GDataTrojan.GenericKD.32349885
KasperskyHEUR:Trojan.MSIL.Agent.gen
AlibabaTrojan:Win32/Malmail.ali1000112
AegisLabTrojan.Multi.Generic.4!c
TencentMsil.Trojan.Agent.Dxmu
Ad-AwareTrojan.GenericKD.32349885
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1043491
DrWebTrojan.PWS.Siggen2.28960
ZillyaTrojan.Injector.Win32.652678
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.jh
Trapminesuspicious.low.ml.score
EmsisoftTrojan.GenericKD.32349885 (B)
APEXMalicious
CyrenW32/MSIL_Kryptik.NA.gen!Eldorado
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1043491
MAXmalware (ai score=100)
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D1ED9EBD
ZoneAlarmHEUR:Trojan.MSIL.Agent.gen
MicrosoftTrojan:MSIL/Skeeyah.A!MTB
SentinelOneDFI – Malicious PE
Acronissuspicious
McAfeeGenericRXIL-XU!175054BBD695
VBA32TScope.Trojan.MSIL
MalwarebytesTrojan.RMCrypt.MSIL.Generic
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Kryptik.SMT
RisingTrojan.Injector!8.C4 (CLOUD)
YandexTrojan.Injector!zTwl/MceUp8
IkarusTrojan.MSIL.Injector
FortinetMSIL/Injector.UMM!tr
AVGWin32:TrojanX-gen [Trj]
AvastWin32:TrojanX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)
MaxSecureTrojan.Malware.1728101.susgen

How to remove MSIL/Kryptik.SMT?

MSIL/Kryptik.SMT removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment