How to remove “MSIL/Kryptik.AAKX”?

The MSIL/Kryptik.AAKX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.AAKX virus can do?

Presents an Authenticode digital signature
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSIL/Kryptik.AAKX?


File Info:
crc32: 54A85E85
md5: 1b9f3fdfae3676c148ba3e670b99a03a
name: 1B9F3FDFAE3676C148BA3E670B99A03A.mlw
sha1: d8b686ed3908b52dff3a348a3bcda770a5857054
sha256: 5116892ae46e3242d58c587cfceeaf0ecc2204085d2e3a4de487ec444cdf9834
sha512: ee0796f7fc2bf77d8d655aa20930588c63416acca755b6d542b739670a71ee4ccc8e8c94f819c57a9d5a2c2694c06e1b81653aaa69b62c2a708a23eb3af22ed2
ssdeep: 12288:G5bwh2L5SSqyWQvcL7Ohm0E8BaJJ/CvBfnPLH5uj03n2e9HK8:G5wh2L5SSqyWQW30EQaJJ/kzZzfI8
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2019 Avira Operations GmbH & Co. KG and its Licensors
InternalName: setup
FileVersion: 1.2.147.35397
CompanyName: Avira Operations GmbH & Co. KG
ProductName: Avira
ProductVersion: 1.2.147.35397
FileDescription: Avira
OriginalFilename: Avira.OE.Setup.Bundle.exe
Translation: 0x0409 0x04e4

MSIL/Kryptik.AAKX also known as:

K7AntiVirus	Trojan ( 0057b2011 )
Elastic	malicious (high confidence)
DrWeb	Trojan.PackedNET.646
Cynet	Malicious (score: 99)
CAT-QuickHeal	Trojan.MSIL
ALYac	Trojan.GenericKD.46129082
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.3076591
Sangfor	Trojan.Win32.Wacatac.B
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:MSIL/Kryptik.6948bac0
K7GW	Trojan ( 0057b2011 )
Cybereason	malicious.d3908b
Cyren	W32/Trojan.WYSZ-3344
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.AAKX
Avast	Win32:CrypterX-gen [Trj]
Kaspersky	HEUR:Trojan.MSIL.Crypt.gen
BitDefender	Trojan.GenericKD.46129082
MicroWorld-eScan	Trojan.GenericKD.46129082
Ad-Aware	Trojan.GenericKD.46129082
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PDN21
McAfee-GW-Edition	PWS-FCWJ!1B9F3FDFAE36
FireEye	Trojan.GenericKD.46129082
Emsisoft	Trojan.GenericKD.46129082 (B)
Avira	TR/Kryptik.cexio
eGambit	PE.Heur.InvalidSig
Microsoft	Trojan:Win32/AgentTesla!ml
Gridinsoft	Trojan.Win32.Agent.sd!ni
Arcabit	Trojan.Generic.D2BFDFBA
AegisLab	Trojan.MSIL.Crypt.4!c
ZoneAlarm	HEUR:Trojan.MSIL.Crypt.gen
GData	Trojan.GenericKD.46129082
AhnLab-V3	Trojan/Win.Generic.C4437767
McAfee	PWS-FCWJ!1B9F3FDFAE36
MAX	malware (ai score=86)
Malwarebytes	Trojan.Injector
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PDN21
Rising	Trojan.Kryptik!8.8 (CLOUD)
Ikarus	Trojan.MSIL.Crypt
MaxSecure	Trojan.Malware.11716371.susgen
Fortinet	MSIL/Kryptik.AAKX!tr
AVG	Win32:CrypterX-gen [Trj]
Paloalto	generic.ml

How to remove MSIL/Kryptik.AAKX?

MSIL/Kryptik.AAKX removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X