What is “MSIL/Kryptik.AADQ”?

The MSIL/Kryptik.AADQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.AADQ virus can do?

The binary likely contains encrypted or compressed data.

How to determine MSIL/Kryptik.AADQ?


File Info:
crc32: 8A15FC4C
md5: 0a2a3daba0f0c75786abc73d64265094
name: 0A2A3DABA0F0C75786ABC73D64265094.mlw
sha1: 2bbd08eb621992fff6291abb9cc97d41f19e9791
sha256: 89e80aaeb7d157eb24c0ad0f6336d0c496e8a706eb74e987b5bd4084d5abc7cd
sha512: 111bd1ecf4b8ec534372dd1d053cce970a5878927f87d2bda6ee51ce6247ec56f9bc50852a244b97698777eaf329fce41c8622ffaaabc984fe808de2e6a9e35d
ssdeep: 12288:pfmgOad5xRJBwncRSb4SkV2PWbh1zCvvDutduuGoozHb3aWe1Zg:pfgaH9ycRcS2+bjOvDmu1z73aY
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Asian Fusion 2020
Assembly Version: 17.1.0.1
InternalName: SpecialFolder.exe
FileVersion: 17.1.1.0
CompanyName: Asian Fusion
LegalTrademarks: 
Comments: 
ProductName: EmployeesManager
ProductVersion: 17.1.1.0
FileDescription: EmployeesManager
OriginalFilename: SpecialFolder.exe

MSIL/Kryptik.AADQ also known as:

Cynet	Malicious (score: 90)
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:Win32/starter.ali1000139
Cyren	W32/MSIL_Kryptik.DRQ.gen!Eldorado
Symantec	Scr.Malcode!gdn30
ESET-NOD32	a variant of MSIL/Kryptik.AADQ
APEX	Malicious
Avast	FileRepMalware
Kaspersky	HEUR:Trojan-Spy.MSIL.Noon.gen
BitDefenderTheta	Gen:NN.ZemsilF.34628.2m0@aiUKvfb
McAfee-GW-Edition	BehavesLike.Win32.Generic.cc
SentinelOne	Static AI – Malicious PE
Webroot	W32.Trojan.Gen
eGambit	Unsafe.AI_Score_93%
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	MSIL.Trojan-Stealer.AgentTesla.8B1VR7
McAfee	RDN/Generic.grp
Malwarebytes	Malware.AI.2548682613
Fortinet	MSIL/Kryptik.AADG!tr
AVG	FileRepMalware
Paloalto	generic.ml

How to remove MSIL/Kryptik.AADQ?

MSIL/Kryptik.AADQ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X