About "Trojan:MSIL/CryptInject.PF!MTB" infection

The Trojan:MSIL/CryptInject.PF!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:MSIL/CryptInject.PF!MTB virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:MSIL/CryptInject.PF!MTB?


File Info:
crc32: 35946120
md5: d63ec614b66945fa100fa1fa7e5ae1b5
name: upload_file
sha1: 683ddacb28e4d43a4d26b9732d61d4302a9edc19
sha256: be017012e16d938d67c9ad9d42b6b5ea1c153c52fc87b7c6e60ba7840467b983
sha512: 090a7250b2859dc3823703745ba8968c4ae6736f4eaf257843689205dd5e640df0ea85953c8c79846d22b4add7351303f3184b258edb19d1202aecf5180a1eca
ssdeep: 6144:OG/CHRo3ThTwHmkKaYZ5D5fHZCEXv5na7h5q9v:VwRo3ThTwH5/YZ5dPZCEXv5a95q9
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Ipzowat 2019
Assembly Version: 6.2.92.37
InternalName: chinomsoddf.exe
FileVersion: 6.2.92.37
CompanyName: Ipzowat
Comments: nfsawum
ProductName: exumi
ProductVersion: 6.2.92.37
FileDescription: exumi
OriginalFilename: chinomsoddf.exe

Trojan:MSIL/CryptInject.PF!MTB also known as:

Elastic	malicious (high confidence)
FireEye	Generic.mg.d63ec614b66945fa
Cylance	Unsafe
Sangfor	Malware
Cybereason	malicious.b28e4d
BitDefenderTheta	Gen:NN.ZemsilF.34566.qm0@aOuJH9d
Cyren	W32/MSIL_Kryptik.BTV.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
Kaspersky	HEUR:Trojan-Spy.MSIL.AveMaria.gen
Alibaba	Trojan:Win32/runner.ali1000123
Invincea	ML/PE-A
MaxSecure	Trojan.Malware.300983.susgen
Microsoft	Trojan:MSIL/CryptInject.PF!MTB
ZoneAlarm	HEUR:Trojan-Spy.MSIL.AveMaria.gen
ESET-NOD32	a variant of MSIL/GenKryptik.EUAE
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	MSIL/Injector.URM!tr
Webroot	W32.Trojan.Gen
AVG	Win32:RATX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Trojan:MSIL/CryptInject.PF!MTB?

Trojan:MSIL/CryptInject.PF!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Trojan:MSIL/CryptInject.PF!MTB” infection