Trojan

Trojan.MSIL.Crypt.hxhn removal guide

Malware Removal

The Trojan.MSIL.Crypt.hxhn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan.MSIL.Crypt.hxhn virus can do?

  • Dynamic (imported) function loading detected
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan.MSIL.Crypt.hxhn?



File Info:

name: BBB79352F7FFCF8D6FF4.mlw
path: /opt/CAPEv2/storage/binaries/18f9315f4aa32fd2b0333dda5101e140597498ec2c184f4b3db7e39c6d57fb98
crc32: 4BFDD8BF
md5: bbb79352f7ffcf8d6ff4a537878fba7c
sha1: 718a59ccd5db58871d7c662ac317f2727d846762
sha256: 18f9315f4aa32fd2b0333dda5101e140597498ec2c184f4b3db7e39c6d57fb98
sha512: 3e0deb0636faa156fabe8e749b0c77fad574834995a04b91a7ca0225ced095c42f3605b217e3fc2501e97620d0c4e28834292509f5154e8686dad1afb4e5235c
ssdeep: 49152:EBPrDmpzpMbBkL24N9uFlAw2AnxsDV7TL4:EBPrDmxpMbBD4OFlxw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18895330968D9DD63D36A37FDEDC283D143A02669F560D3872A8BB54B8ED73620600F97
sha3_384: 4b74c0ebe1b2c2b8ddd04763ab6682c83880d737dc7eb9bb04d1fd4397065257bc3dfb36155b30608262fcd25612a0ba
ep_bytes: ff250020400000000000000000000000
timestamp: 2019-05-02 13:34:19


Version Info:

Translation: 0x0000 0x04b0
Comments: iRemovalPRO Activator V2
CompanyName: iRemovalPRO
FileDescription: iRemovalPRO v2.0
FileVersion: 2.0.0.0
InternalName: iRemovalPRO v2.0.exe
LegalCopyright: Copyright © 2020
LegalTrademarks: IFPDZ, GODLIKE5
OriginalFilename: iRemovalPRO v2.0.exe
ProductName: iRemovalPRO v2.0
ProductVersion: 2.0.0.0
Assembly Version: 2.0.0.0

Trojan.MSIL.Crypt.hxhn also known as:

LionicTrojan.MSIL.Crypt.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Heur.MSIL.Androm.3
FireEyeGeneric.mg.bbb79352f7ffcf8d
CAT-QuickHealTrojan.WacatacFC.S18892752
McAfeeArtemis!BBB79352F7FF
CylanceUnsafe
SangforTrojan.MSIL.Crypt.hxhn
K7AntiVirusTrojan ( 700000121 )
AlibabaTrojan:MSIL/Androm.198f0918
K7GWTrojan ( 700000121 )
Cybereasonmalicious.2f7ffc
CyrenW32/Trojan.UYHF-7751
SymantecML.Attribute.HighConfidence
APEXMalicious
KasperskyTrojan.MSIL.Crypt.hxhn
BitDefenderGen:Heur.MSIL.Androm.3
AvastWin32:Malware-gen
TencentMsil.Trojan.Crypt.Pitr
Ad-AwareGen:Heur.MSIL.Androm.3
EmsisoftGen:Heur.MSIL.Androm.3 (B)
TrendMicroTROJ_GEN.R002C0WLF21
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
SophosMal/Generic-S
IkarusGen.MSIL.Androm
GDataGen:Heur.MSIL.Androm.3
JiangminTrojan.MSIL.mgqw
eGambitUnsafe.AI_Score_95%
AviraHEUR/AGEN.1141640
MAXmalware (ai score=89)
KingsoftWin32.Troj.Undef.(kcloud)
GridinsoftRansom.Win32.Sabsik.ns
ArcabitTrojan.MSIL.Androm.3
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
AhnLab-V3Malware/Gen.RL_Reputation.C4292469
BitDefenderThetaGen:NN.ZemsilF.34114.8n0@ayMY7rb
ALYacGen:Heur.MSIL.Androm.3
VBA32TScope.Trojan.MSIL
MalwarebytesMalware.AI.3834648472
TrendMicro-HouseCallTROJ_GEN.R002C0WLF21
YandexTrojan.Crypt!xx11KiJ7+/c
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetPossibleThreat
WebrootW32.Malware.Gen
AVGWin32:Malware-gen
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_80% (W)

How to remove Trojan.MSIL.Crypt.hxhn?

Trojan.MSIL.Crypt.hxhn removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment