Trojan

Trojan.RCrypt.MSIL.Generic (file analysis)

Malware Removal

The Trojan.RCrypt.MSIL.Generic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.RCrypt.MSIL.Generic virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Trojan.RCrypt.MSIL.Generic?


File Info:

crc32: 6D981D69
md5: 9ad92e0e3026f9e4e3ca73f4caab0ac5
name: lex.jpg
sha1: cdc5a8a3659757352b38cde0cbd195958b40efc5
sha256: 83abe045ee467d64d2c990eea2911555be5a378f249232e77b0a0d90c62dbcc5
sha512: a27b2a1c894e21a307242cc031616aa5ba00af5c23010227b42fb45c427027839ea0a05a3fec5c9fec80b03e54262aaea2e2c49de0fbee16c2e95dd03685420c
ssdeep: 6144:FOBrVtEjIohCj1Kh4FaIGg3CJZoh4X4YFiJuCvQCtuEjuRS8Xvz0ufit:FwrVtTtj1KSHGgsk4xFiJuaQCPjF8
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

Trojan.RCrypt.MSIL.Generic also known as:

DrWebTrojan.Siggen8.58039
MicroWorld-eScanTrojan.GenericKD.32766711
CAT-QuickHealTrojan.MSIL
McAfeeRDN/Generic.rp
CylanceUnsafe
K7AntiVirusTrojan ( 0055c2061 )
BitDefenderTrojan.GenericKD.32766711
K7GWTrojan ( 0055c2061 )
Cybereasonmalicious.365975
BitDefenderThetaGen:NN.ZemsilF.32515.viW@aakrJfb
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
GDataTrojan.GenericKD.32766711
KasperskyHEUR:Trojan.MSIL.Crypt.gen
AlibabaTrojan:Win32/darker.ali1000147
NANO-AntivirusTrojan.Win32.Kryptik.gjrqyr
AegisLabTrojan.MSIL.Crypt.4!c
Endgamemalicious (high confidence)
SophosMal/Generic-S
ComodoMalware@#3b6vvwdctq5pa
F-SecureHeuristic.HEUR/AGEN.1037756
VIPRETrojan.Win32.Generic!BT
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
Trapminemalicious.high.ml.score
IkarusTrojan.Agent
CyrenW32/Trojan.HJUW-8221
AviraHEUR/AGEN.1037756
MicrosoftBackdoor:Win32/Rescoms.C!bit
ArcabitTrojan.Generic.D1F3FAF7
ZoneAlarmHEUR:Trojan.MSIL.Crypt.gen
Acronissuspicious
ALYacTrojan.GenericKD.32766711
MAXmalware (ai score=83)
MalwarebytesTrojan.RCrypt.MSIL.Generic
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Kryptik.TVN
TrendMicro-HouseCallTROJ_GEN.R002C0PL119
YandexTrojan.AvsArher.bSFjrR
SentinelOneDFI – Suspicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Kryptik.TVN!tr
Ad-AwareTrojan.GenericKD.32766711
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_60% (W)
Qihoo-360HEUR/QVM03.0.987D.Malware.Gen

How to remove Trojan.RCrypt.MSIL.Generic?

Trojan.RCrypt.MSIL.Generic removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment