Categories: Malware

MSIL/Kryptik.ZGX removal

The MSIL/Kryptik.ZGX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Kryptik.ZGX virus can do?

Executable code extraction
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
A process created a hidden window
Unconventionial language used in binary resources: Polish
Uses Windows utilities for basic functionality
Deletes its original binary from disk
Installs itself for autorun at Windows startup
Attempts to modify proxy settings
Creates a copy of itself

Related domains:

z.whorecord.xyz

a.tomx.xyz

ureylarnalyoguentrad.online

nslandisteledthymber.online

rusixonhurgiletimeto.online

How to determine MSIL/Kryptik.ZGX?


File Info:
crc32: D07633B6md5: f3cf8f0537c6ee14168733cf3cd82bb8name: F3CF8F0537C6EE14168733CF3CD82BB8.mlwsha1: 58a96b4d874e1d5ce03889ffe8ec1db4eee6dca8sha256: a0959863dc0af86481f9f9c5322c348c2d71d157784db40aaa63b23ebed571dfsha512: 80dfdd23faba11abf0523779166714f915012068292a619d3eebfb52508a07c1acaf5e5db9218ffc41cf6e7452a0b8b5b19322968d534a96a1ae110890a05337ssdeep: 12288:m1GXCyXakbQGzm9qTDF2xeshgH8uS73ntYaE+:Vm9qTDF2oshgS73Ztype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

MSIL/Kryptik.ZGX also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.36146132
CAT-QuickHeal	Trojan.Multi
McAfee	Artemis!F3CF8F0537C6
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Multi.Generic.4!c
Sangfor	Malware
K7AntiVirus	Trojan ( 0057644c1 )
BitDefender	Trojan.GenericKD.36146132
K7GW	Trojan ( 0057644c1 )
Cybereason	malicious.d874e1
Arcabit	Trojan.Generic.D2278BD4
Cyren	W32/Trojan.VAVF-2184
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan-Spy.Win32.SpyEyes.blft
Alibaba	TrojanSpy:Win32/SpyEyes.7a42a218
Rising	Backdoor.Remcos!8.B89E (TFE:1:KwFKbqSl0IK)
Ad-Aware	Trojan.GenericKD.36146132
Sophos	Mal/Generic-R + Mal/EncPk-APW
Comodo	TrojWare.Win32.Genome.oyqoi@0
F-Secure	Trojan.TR/AD.TriumphLoader.W
Zillya	Trojan.SpyEyes.Win32.15181
TrendMicro	TROJ_GEN.R002C0RAK21
McAfee-GW-Edition	BehavesLike.Win32.Generic.cm
FireEye	Generic.mg.f3cf8f0537c6ee14
Emsisoft	Trojan.GenericKD.36146132 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanSpy.SpyEyes.pkq
Webroot	W32.Trojan.Gen
Avira	TR/AD.TriumphLoader.W
MAX	malware (ai score=82)
Gridinsoft	Trojan.Win32.Kryptik.vb
Microsoft	Trojan:Win32/Ymacco.AAA0
ZoneAlarm	Trojan-Spy.Win32.SpyEyes.blft
GData	Trojan.GenericKD.36146132
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Gen.RL_Reputation.R363579
VBA32	TrojanSpy.SpyEyes
ALYac	Trojan.GenericKD.36146132
Malwarebytes	Malware.Heuristic.1003
Panda	Trj/CI.A
ESET-NOD32	a variant of MSIL/Kryptik.ZGX
TrendMicro-HouseCall	TROJ_GEN.R002C0RAK21
Tencent	Win32.Trojan-spy.Spyeyes.Edxn
Ikarus	Trojan.MSIL.Crypt
Fortinet	MSIL/Kryptik.ZGX!tr
BitDefenderTheta	Gen:NN.ZexaF.34780.1mW@aq09u!hG
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Generic/HEUR/QVM19.1.ACA7.Malware.Gen