Malware

MSIL/Kryptik.AAID removal guide

Malware Removal

The MSIL/Kryptik.AAID is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Kryptik.AAID virus can do?

  • The binary likely contains encrypted or compressed data.

How to determine MSIL/Kryptik.AAID?


File Info:

crc32: 4ABA84E7
md5: 7bb5e280fa7ba8cf2dfce650034339e0
name: 7BB5E280FA7BA8CF2DFCE650034339E0.mlw
sha1: 86ce6053aea4432409d394b65ee3f6a8c6fb1a40
sha256: 228d3b8dea2bd47cf98d69b89b5acdfa3a1425e201217882edc93de72fe0e37e
sha512: 72589ab2807eef3d119006adda394ba7650a1e098eccaa89f59c8cae6a5e1ff2e49e181ebff232dad8043a5f6f2a9bb93b0bbfaf52e953b035806b3bf058db37
ssdeep: 12288:aaRbDcM3Q3rOdeW++HhtUnNJ2WD+yOiyCyYP2Dm/KLs2P:DEZrOdv+Yh+NMyOvu26/isS
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2020
Assembly Version: 1.0.0.0
InternalName: Jirgtv.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments: Excel Macro Exploit
ProductName: Excel Macro Exploit
ProductVersion: 1.0.0.0
FileDescription: Excel Macro Exploit
OriginalFilename: Jirgtv.exe

MSIL/Kryptik.AAID also known as:

Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.46040175
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (W)
Cybereasonmalicious.3aea44
CyrenW32/MSIL_Kryptik.DUA.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Kryptik.AAID
APEXMalicious
AvastWin32:PWSX-gen [Trj]
KasperskyHEUR:Trojan-Spy.MSIL.Noon.gen
BitDefenderTrojan.GenericKD.46040175
MicroWorld-eScanTrojan.GenericKD.46040175
TencentWin32.Trojan.Inject.Auto
Ad-AwareTrojan.GenericKD.46040175
SophosML/PE-A
BitDefenderThetaGen:NN.ZemsilF.34670.Qm0@ai5Mi0e
FireEyeGeneric.mg.7bb5e280fa7ba8cf
EmsisoftTrojan.GenericKD.46040175 (B)
SentinelOneStatic AI – Malicious PE
WebrootW32.Trojan.MSIL.Noon
AviraTR/AD.Swotter.cxjej
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Wacatac.B!ml
AegisLabTrojan.MSIL.Noon.l!c
GDataTrojan.GenericKD.46040175
AhnLab-V3PUP/Win.Generic.C4405757
Acronissuspicious
McAfeeArtemis!7BB5E280FA7B
MAXmalware (ai score=84)
MalwarebytesTrojan.Crypt.MSIL
RisingTrojan.Kryptik!8.8 (CLOUD)
IkarusTrojan.MSIL.Inject
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Kryptik.AAHU!tr
AVGWin32:PWSX-gen [Trj]
Qihoo-360Win32/Trojan.Generic.HgIASSQA

How to remove MSIL/Kryptik.AAID?

MSIL/Kryptik.AAID removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment