About "VirTool:MSIL/CryptInject" infection

The VirTool:MSIL/CryptInject is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VirTool:MSIL/CryptInject virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine VirTool:MSIL/CryptInject?


File Info:
crc32: A6E1EC84
md5: c6889c70ce098c71d49f6297266c3c3f
name: C6889C70CE098C71D49F6297266C3C3F.mlw
sha1: 7fd05e645a647987c6f2f70015d86abd60dd1796
sha256: a509e1c9624f9d3bbe63f071c8e53a40f05132bbeb42a1048cf57a6c743e7a8b
sha512: 1f547b5e30ffb2a2cadfd77ce15424bbd4643d585fd7adcf49684bba7673ead824856f679713254d06283519e94a2f9ccdffaf308d140d6f508b600e4fe65999
ssdeep: 49152:j/dvDllxzT2G+J8mMrm1RF4cUwSN24VHgOGf78Zbn+1qkq6h8ZbnRUH:pvDllxZmMrm1RF4vww2sHgOW1qf63
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) Microsoft Corp. 2001
InternalName: Microsoft New Phonetic IME user define phrase tool
FileVersion: 5.2.2801
CompanyName: Microsoft Corporation
Comments: Unicode IME
ProductName: New Phonetic
ProductVersion: 5.2.2801
FileDescription: Microsoft New Phonetic IME 2002a user define phrase tool
OriginalFilename: TINTLPHR.EXE
Translation: 0x0404 0x03b6

VirTool:MSIL/CryptInject also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Fugrafa.40956
FireEye	Generic.mg.c6889c70ce098c71
ALYac	Trojan.GenericKD.33681992
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
BitDefender	Gen:Variant.Fugrafa.40956
Cyren	W32/Agent.BUU.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Alibaba	Worm:Win32/Bloored.49d6b478
AegisLab	Trojan.Win32.Generic.4!c
Ad-Aware	Trojan.GenericKD.33681992
Sophos	Generic ML PUA (PUA)
F-Secure	Heuristic.HEUR/AGEN.1137911
McAfee-GW-Edition	BehavesLike.Win32.Trojan.rm
Emsisoft	Gen:Variant.Fugrafa.40956 (B)
Ikarus	Worm.Win32.Bloored
Avira	HEUR/AGEN.1137911
MAX	malware (ai score=80)
Microsoft	VirTool:MSIL/CryptInject
Gridinsoft	Trojan.Win32.Downloader.oa
Arcabit	Trojan.Fugrafa.D9FFC
GData	Trojan.GenericKD.33681992
Cynet	Malicious (score: 100)
McAfee	Artemis!C6889C70CE09
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Bloored.FD1F!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_80% (D)
Qihoo-360	Generic/Trojan.b3b

How to remove VirTool:MSIL/CryptInject?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “VirTool:MSIL/CryptInject” infection