Categories: Trojan

How to remove “Trojan.Crypt.KNS.Generic”?

The Trojan.Crypt.KNS.Generic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Crypt.KNS.Generic virus can do?

Executable code extraction
Creates RWX memory
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Creates a copy of itself

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Crypt.KNS.Generic?


File Info:
crc32: 36AFE61Bmd5: bfb1e21a40413bcc9afea8f9c142faf5name: BFB1E21A40413BCC9AFEA8F9C142FAF5.mlwsha1: 1ef4683e9177c56033e1b7329b86289ace461de9sha256: 2bc008bac369c1fa855d30b5ded1734247e76a1d5cef450a43e2d2d17a72df50sha512: af69b38bf09133f3f010fb56497dccb8d1befab78c00ac70a30631a452bee57de75cdfff1c22f26411a6455042eee43f5612b6d838159a7bf93fa6ccd4a6b312ssdeep: 6144:PTn+aS77qmE/iT3nNhT/nr8M+190eoxQoAOVoaDx:PT+JKfanNhT/r8MA90568jDxtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright:  Assembly Version: 0.0.0.0InternalName: winlog.exeFileVersion: 0.0.0.0ProductVersion: 0.0.0.0FileDescription:  OriginalFilename: winlog.exe

Trojan.Crypt.KNS.Generic also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.AVKill.17790
MicroWorld-eScan	Gen:Variant.Razy.461075
FireEye	Generic.mg.bfb1e21a40413bcc
ALYac	Gen:Variant.Razy.461075
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Variant.Razy.461075
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.34590.um0@a0Hukdm
Cyren	W32/Agent.AQM.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	MSIL:GenMalicious-COE [Trj]
ClamAV	Win.Packed.Zusy-7171717-0
Kaspersky	HEUR:Trojan.MSIL.Generic
NANO-Antivirus	Trojan.Win32.AVKill.dbocez
Ad-Aware	Gen:Variant.Razy.461075
Sophos	ML/PE-A + Troj/dnSink-A
F-Secure	Trojan.TR/Dropper.MSIL.Gen
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
Emsisoft	Gen:Variant.Razy.461075 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_91%
Avira	TR/Dropper.MSIL.Gen
Microsoft	Trojan:MSIL/Injector.RB!MSR
Arcabit	Trojan.Razy.D70913
ZoneAlarm	HEUR:Trojan.MSIL.Generic
GData	Gen:Variant.Razy.461075
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.RL_Generic.C3467607
McAfee	GenericRXDZ-SJ!BFB1E21A4041
MAX	malware (ai score=85)
Malwarebytes	Trojan.Crypt.KNS.Generic
ESET-NOD32	a variant of MSIL/Injector.CQJ
Ikarus	Backdoor.Win32.DarkKomet
Fortinet	MSIL/Dropper.BEC!tr
AVG	MSIL:GenMalicious-COE [Trj]
Cybereason	malicious.a40413
Qihoo-360	HEUR/QVM03.0.8BC9.Malware.Gen