About "MSIL/Riskware.Crypter.HA" infection

The MSIL/Riskware.Crypter.HA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Riskware.Crypter.HA virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/Riskware.Crypter.HA?


File Info:
crc32: DA6E9AD6
md5: 447282ebdc14dce0732fdea627f36b48
name: 447282EBDC14DCE0732FDEA627F36B48.mlw
sha1: bd04a8b14068481306fc463a64dbc27613b60dc3
sha256: 711c2392293ae06fb31db555487b4b98a629fd5cd53d907f10a4c3654876e99f
sha512: 58fb9e71a77e5e961d75d54a48c005e793ba8cc586f87ef6e01496535bc4a26174d88d2595c56cba39715722e4b0c8ec9a80708b72f2d5d905817f84b92a45d7
ssdeep: 12288:W5QONZ5zE1UM+6Jonq/77+h0MXxBzRiPgnR77iJ:W5QOf5zE1OQon27+2Yhn2
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: CRYPTON.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: CRYPTON
ProductVersion: 1.0.0.0
FileDescription: CRYPTON
OriginalFilename: CRYPTON.exe

MSIL/Riskware.Crypter.HA also known as:

ESET-NOD32	a variant of MSIL/Riskware.Crypter.HA
APEX	Malicious
Cynet	Malicious (score: 100)
Comodo	TrojWare.Win32.Krap.T@1oolym
BitDefenderTheta	Gen:NN.ZemsilF.34294.9m0@a0N2uui
FireEye	Generic.mg.447282ebdc14dce0
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1134433
Microsoft	Backdoor:Win32/Bladabindi!ml
MaxSecure	Trojan.Malware.300983.susgen

How to remove MSIL/Riskware.Crypter.HA?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “MSIL/Riskware.Crypter.HA” infection