MSIL/Kryptik.XGX information

The MSIL/Kryptik.XGX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Kryptik.XGX virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/Kryptik.XGX?


File Info:
crc32: 84C31C03
md5: 1bd51dff60db4a8ef6ed10693bcd8fd6
name: upload_file
sha1: 54966bb1c25f81f892f95ef8adb540d9a560a881
sha256: 961ca60cc81e38eacdf3197954394b03430b09a5613db567adfab92a3a718d0b
sha512: ab6043739c641b694d1696ce3f1515b3461669dc2564b2f818becbadcbb3c03a6537ad71fc7235e0109d320a5306c86cf7fcf4c73bee0cbbdb7dca2667e662e0
ssdeep: 12288:H7Wb6ne8s6G62KFVey1/KUOxsgb/5riveNcS4xUIXDsZp0K2:H7WhBKFVp1//6a2uzZK2
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
Assembly Version: 2.0.0.0
InternalName: ServiceHub.Host.CLR.x86.exe
FileVersion: 2.4.227.2020
CompanyName: Microsoft
Comments: Microsoft Service Hub x86 CLR host
ProductName: ServiceHub.Host.CLR.x86
ProductVersion: 2.4.227+e4076a6e7d.RR
FileDescription: ServiceHub.Host.CLR.x86
OriginalFilename: ServiceHub.Host.CLR.x86.exe

MSIL/Kryptik.XGX also known as:

MicroWorld-eScan	Trojan.GenericKD.43643559
Cylance	Unsafe
AegisLab	Trojan.Multi.Generic.4!c
Sangfor	Malware
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Trojan.GenericKD.43643559
K7GW	Trojan ( 0056c2401 )
TrendMicro	TROJ_FRS.VSNW0BH20
BitDefenderTheta	Gen:NN.ZemsilF.34152.Lm0@am64HAo
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.XGX
APEX	Malicious
GData	Win32.Trojan-Stealer.MassLogger.NLOTLZ
Kaspersky	HEUR:Trojan.MSIL.Scarsi.gen
Alibaba	Trojan:MSIL/Kryptik.096549a4
Ad-Aware	Trojan.GenericKD.43643559
Comodo	.UnclassifiedMalware@0
DrWeb	Trojan.Inject3.50162
FireEye	Generic.mg.1bd51dff60db4a8e
Ikarus	Trojan.Inject
Webroot	W32.Trojan.Gen
Arcabit	Trojan.Generic.D299F2A7
ZoneAlarm	HEUR:Trojan.MSIL.Scarsi.gen
Microsoft	Trojan:Win32/Woreflint.A!cl
AhnLab-V3	Trojan/Win32.AgentTesla.C4177411
McAfee	Trojan-FTAB!1BD51DFF60DB
MAX	malware (ai score=81)
Malwarebytes	Spyware.MassLogger
TrendMicro-HouseCall	TROJ_FRS.VSNW0BH20
Rising	Trojan.Kryptik!8.8 (CLOUD)
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/Kryptik.XGX!tr
AVG	FileRepMalware
Paloalto	generic.ml
Qihoo-360	Generic/Trojan.31e

How to remove MSIL/Kryptik.XGX?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSIL/Kryptik.XGX information