MSIL/Kryptik.ABYH removal instruction

The MSIL/Kryptik.ABYH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Kryptik.ABYH virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/Kryptik.ABYH?


File Info:
crc32: 3763E67B
md5: 9dbcf183762872d8917b8a19535a0c65
name: 9DBCF183762872D8917B8A19535A0C65.mlw
sha1: 94d27127f8ffbebec6ad803599ed3c0477a15e3c
sha256: 759d3e20098353e73c0c417ecf755a3ab24cdf7ead10df8c5a4aab549d7423f2
sha512: cd3fb751c0360df6865633d72633403c0802153727fe75951e842227b4237970df999229c73d1e94d9e0f0b0442ec58ec59024836ebef3f7605254bc6a4f82b6
ssdeep: 49152:7wFpwLN5DX5ecu7O4jrimxMHDUrY+BPOIz8uJxLWuXoK:8wLf8qHa1eunvXoK
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright (c) 2015-2021 Exodus Movement, Inc.
Assembly Version: 21.7.2.0
InternalName: notepad.exe
FileVersion: 21.7.2.0
CompanyName: Exodus Movement Inc
LegalTrademarks: 
Comments: Exodus
ProductName: Exodus
ProductVersion: 21.7.2.0
FileDescription: Exodus
OriginalFilename: notepad.exe

MSIL/Kryptik.ABYH also known as:

K7AntiVirus	Trojan ( 0057f6011 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen14.37253
Sangfor	CoinMiner.MSIL.BitCoinMiner.gen
CrowdStrike	win/malicious_confidence_80% (W)
K7GW	Trojan ( 0057f6011 )
Symantec	Trojan Horse
ESET-NOD32	a variant of MSIL/Kryptik.ABYH
APEX	Malicious
Avast	Win32:CoinminerX-gen [Trj]
Kaspersky	HEUR:Trojan.MSIL.BitCoinMiner.gen
BitDefender	Trojan.GenericKD.46623044
MicroWorld-eScan	Trojan.GenericKD.46623044
Tencent	Win32.Trojan.Inject.Auto
Ad-Aware	Trojan.GenericKD.46623044
Sophos	Mal/Generic-S
Comodo	Malware@#2ymincfe4495e
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.9dbcf183762872d8
Emsisoft	Trojan.GenericKD.46623044 (B)
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/CoinMiner.BW!bit
GData	Trojan.GenericKD.46623044
AhnLab-V3	Trojan/Win.CoinminerX-gen.C4552282
McAfee	Artemis!9DBCF1837628
MAX	malware (ai score=87)
Malwarebytes	MachineLearning/Anomalous.100%
Panda	Trj/CI.A
Ikarus	Trojan.MSIL.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.ABYH!tr
AVG	Win32:CoinminerX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Miner.BitCoinMiner.HgIASYYA

How to remove MSIL/Kryptik.ABYH?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSIL/Kryptik.ABYH removal instruction