Trojan

About “Trojan.PCrypt.MSIL.Generic” infection

Malware Removal

The Trojan.PCrypt.MSIL.Generic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Trojan.PCrypt.MSIL.Generic virus can do?

  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.

How to determine Trojan.PCrypt.MSIL.Generic?


File Info:

crc32: 7A0A4735
md5: 1b10efab6bcfd6b1ddf9dee8403ecca6
name: finofile.exe
sha1: b33347596f2432538f9b4238759268e97f485a56
sha256: 6e654ffb89451bc02a12c2d92a054e08a762e4e251804f377a2084a65cd34458
sha512: 604bc0f34dc1bc965eb612c4377fadf8fa008fc3a5692beb1db378025e1eb303239d2b76c0d6c3f781de455e0fe18019636a4b07c7e5e2b3c20d96a12cda6a23
ssdeep: 12288:rwnqnCok3MZ2V90clWXPe7KcW19p8Xb73T0ptSPIP:rvCt2clW2BQgXbqEI
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright ProsCreate 2019
Assembly Version: 1.0.0.0
InternalName: ProsCreate.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: ProsCreate
ProductVersion: 1.0.0.0
FileDescription: ProsCreate
OriginalFilename: ProsCreate.exe

Trojan.PCrypt.MSIL.Generic also known as:

MicroWorld-eScanTrojan.GenericKDZ.59568
FireEyeGeneric.mg.1b10efab6bcfd6b1
CAT-QuickHealTrojan.MSIL
McAfeeGenericRXJB-JU!1B10EFAB6BCF
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.MSIL.Disfa.4!c
K7AntiVirusTrojan ( 700000121 )
BitDefenderTrojan.GenericKDZ.59568
K7GWTrojan ( 700000121 )
CrowdStrikewin/malicious_confidence_100% (W)
TrendMicroTROJ_GEN.R002C0WKC19
SymantecTrojan Horse
APEXMalicious
AvastWin32:CrypterX-gen [Trj]
GDataTrojan.GenericKDZ.59568
KasperskyHEUR:Trojan.MSIL.Disfa.gen
AlibabaTrojan:Win32/Starter.ali2000005
NANO-AntivirusTrojan.Win32.Disfa.ghixwv
RisingTrojan.Kryptik!8.8 (TFE:C:kbwZGU7nfnP)
Endgamemalicious (moderate confidence)
F-SecureTrojan.TR/Kryptik.pywuc
DrWebTrojan.KillProc2.6649
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.hc
Trapminesuspicious.low.ml.score
SophosMal/Generic-S
IkarusTrojan.MSIL.Crypt
CyrenW32/Trojan.XCJX-5951
JiangminTrojan.MSIL.nirl
AviraTR/Kryptik.pywuc
MAXmalware (ai score=99)
Antiy-AVLTrojan/MSIL.Disfa
MicrosoftTrojan:Win32/Tiggre!rfn
ArcabitTrojan.Generic.DE8B0
ZoneAlarmHEUR:Trojan.MSIL.Disfa.gen
AhnLab-V3Trojan/Win32.Disfa.C3564875
Acronissuspicious
BitDefenderThetaGen:NN.ZemsilF.32251.Km0@aWPfcZb
ALYacTrojan.GenericKDZ.59568
VBA32TScope.Trojan.MSIL
MalwarebytesTrojan.PCrypt.MSIL.Generic
PandaGeneric Malware
ESET-NOD32a variant of MSIL/Kryptik.QME
TrendMicro-HouseCallTROJ_GEN.R002C0WKC19
SentinelOneDFI – Suspicious PE
MaxSecureTrojan.Malware.73686406.susgen
FortinetMSIL/Kryptik.QME!tr
Ad-AwareTrojan.GenericKDZ.59568
AVGWin32:CrypterX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.593

How to remove Trojan.PCrypt.MSIL.Generic?

Trojan.PCrypt.MSIL.Generic removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment