What is "MSIL/Riskware.Crypter.VL"?

The MSIL/Riskware.Crypter.VL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Riskware.Crypter.VL virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/Riskware.Crypter.VL?


File Info:
crc32: 07DBDFAE
md5: ab5bdbb560121bd52da33cba340ceacf
name: AB5BDBB560121BD52DA33CBA340CEACF.mlw
sha1: aab307470fa2e11cf649c1aa01548fafb06b8a65
sha256: 5c6a95dce0f08f54d0a2f78ce938b50070b860e842e488b5ce2c2647ecfdfcc9
sha512: 714260d34b9abd85a121bd8501f2b6ca38ab99a73f89072390e689b04090c57ccfc922bb87f1183867969bd5bef46c8b30e0d17fa4c5ee8118a7e38d29489646
ssdeep: 98304:5kjozJ9/im8XVBKl6t1buVfRhq+5tXzgCa/Tn:lzJpjS346t1bIfuq07n
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: Mercurial.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Mercurial
ProductVersion: 1.0.0.0
FileDescription: Mercurial
OriginalFilename: Mercurial.exe

MSIL/Riskware.Crypter.VL also known as:

Elastic	malicious (high confidence)
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
ALYac	Trojan.GenericKD.47430414
Zillya	Trojan.Agent.Win32.2170940
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
ESET-NOD32	a variant of MSIL/Riskware.Crypter.VL
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-PSW.MSIL.Agent.gen
BitDefender	Trojan.GenericKD.47430414
MicroWorld-eScan	Trojan.GenericKD.47430414
Tencent	Malware.Win32.Gencirc.11d47a2e
Ad-Aware	Trojan.GenericKD.47430414
McAfee-GW-Edition	GenericRXOT-RK!AB5BDBB56012
FireEye	Generic.mg.ab5bdbb560121bd5
Emsisoft	Trojan.GenericKD.47430414 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.PSW.MSIL.btku
Antiy-AVL	Trojan/Generic.ASMalwS.3380CA9
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Generic.D2D3BB0E
GData	MSIL.Trojan.PSE.5KP3YF
AhnLab-V3	Trojan/Win.Generic.R424974
McAfee	GenericRXOT-RK!AB5BDBB56012
MAX	malware (ai score=87)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Spyware.PasswordStealer
Panda	Trj/GdSda.A
Yandex	Trojan.Agent!+lmQb3aWMnE
Ikarus	PWS.MSIL.Mercurial
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:MalwareX-gen [Trj]

How to remove MSIL/Riskware.Crypter.VL?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “MSIL/Riskware.Crypter.VL”?