About “Troj/Krypt-BT” infection

The Troj/Krypt-BT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Troj/Krypt-BT virus can do?

Network activity detected but not expressed in API logs

How to determine Troj/Krypt-BT?


File Info:
crc32: CBEC65AE
md5: e58b965b8341b661d4546ba242251b1e
name: E58B965B8341B661D4546BA242251B1E.mlw
sha1: 7995af24dbfd531034378f08bdb9c58032baed8e
sha256: 2e4256a1d7bc9f40528cded530aaf91410b3b55eff762908d7bd61cb5962e51e
sha512: da9f6a286a9a8f8b30a8dd0d7c3939cb97dffa272eebd8b90b4dada49d3995a3903dda0fc5751475d0f9ce9ecaed611590badd6fa4bda510af19131fbab459b9
ssdeep: 12288:8nQOm0PM/RvYD2yVVkLjk9v+mFHuvqPc:a9bPovYD2/LEiqPc
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Drur 2011
Assembly Version: 1.1.0.0
InternalName: IsSignUnspecifiedBy.exe
FileVersion: 1.1.0.0
CompanyName: Drur
LegalTrademarks: 
Comments: 
ProductName: AppInForm
ProductVersion: 1.1.0.0
FileDescription: AppInForm
OriginalFilename: IsSignUnspecifiedBy.exe

Troj/Krypt-BT also known as:

K7AntiVirus	Trojan ( 005819771 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Packed2.43380
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.46893233
CrowdStrike	win/malicious_confidence_90% (W)
K7GW	Trojan ( 005819771 )
Cybereason	malicious.4dbfd5
Cyren	W32/MSIL_Troj.BKO.gen!Eldorado
Symantec	Scr.Malcode!gdn30
ESET-NOD32	a variant of MSIL/Kryptik.ACQA
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Trojan-Spy.MSIL.Noon.gen
BitDefender	Trojan.GenericKD.46893233
MicroWorld-eScan	Trojan.GenericKD.46893233
Ad-Aware	Trojan.GenericKD.46893233
Sophos	Troj/Krypt-BT
BitDefenderTheta	Gen:NN.ZemsilF.34126.4m0@auaZeRk
McAfee-GW-Edition	AgentTesla-FDBQ!E58B965B8341
FireEye	Generic.mg.e58b965b8341b661
Emsisoft	Trojan.Crypt (A)
Microsoft	Trojan:MSIL/AgentTesla.CQH!MTB
GData	Trojan.GenericKD.46893233
AhnLab-V3	Trojan/Win.MSILKrypt.R439450
McAfee	AgentTesla-FDBQ!E58B965B8341
MAX	malware (ai score=88)
Malwarebytes	Trojan.Tasker
Yandex	Trojan.Igent.bWuWUH.5
Ikarus	Trojan-Spy.Keylogger.Snake
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/GenKryptik.FJTZ!tr
AVG	Win32:PWSX-gen [Trj]

How to remove Troj/Krypt-BT?

Troj/Krypt-BT removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X