Malware

About “MSIL/Kryptik.ACPD” infection

Malware Removal

The MSIL/Kryptik.ACPD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Kryptik.ACPD virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine MSIL/Kryptik.ACPD?


File Info:

crc32: B98B2130
md5: e2b13604b1d5b63a10fb21e6e5e1b57a
name: E2B13604B1D5B63A10FB21E6E5E1B57A.mlw
sha1: 3ae6d70f5294552213f2d9474750fb119fc10b4f
sha256: f9c93b55480fa735f3895baff0261135dab2b80ca273e5c0d55a0366463f6d6d
sha512: be6e7628b79bb5ae4efa8f7144c5b5dca9c81a7bbf6eb1ee5bbb94a24b7a795d8a5f3889ea934ea0fa46755329df52d32dc5b7ea8cc359dd6a7e3fede5c99fa9
ssdeep: 12288:mwIgHqwlzOC3vsfRxtp8mtas0tDjMcvoqWuGuEr54FYiBRCGh1+/:mwIqvp30ZfpdPujNvoqF4Gh6
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: as
Assembly Version: 5.6.7.7
InternalName: UlTF.exe
FileVersion: 1.2.3.4
CompanyName: it
LegalTrademarks: ok
Comments: is
ProductName: or
ProductVersion: 1.2.3.4
FileDescription: so
OriginalFilename: UlTF.exe

MSIL/Kryptik.ACPD also known as:

Elasticmalicious (high confidence)
DrWebBackDoor.SpyBotNET.25
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/MSIL_Kryptik.FJA.gen!Eldorado
SymantecTrojan.Gen.2
ESET-NOD32a variant of MSIL/Kryptik.ACPD
APEXMalicious
AvastWin32:RATX-gen [Trj]
KasperskyHEUR:Trojan.MSIL.Taskun.gen
BitDefenderTrojan.GenericKD.37484305
MicroWorld-eScanTrojan.GenericKD.37484305
Ad-AwareTrojan.GenericKD.37484305
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZemsilF.34110.Vm0@am4gnpn
McAfee-GW-EditionBehavesLike.Win32.Generic.bc
FireEyeGeneric.mg.e2b13604b1d5b63a
EmsisoftTrojan.GenericKD.37484614 (B)
SentinelOneStatic AI – Malicious PE
WebrootW32.Trojan.Gen
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftPWS:MSIL/DarkStealer.AD!MTB
ArcabitTrojan.Generic.D23BF846
GDataTrojan.GenericKD.37484305
McAfeeArtemis!E2B13604B1D5
MAXmalware (ai score=86)
VBA32CIL.HeapOverride.Heur
IkarusTrojan.Inject
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Kryptik.ACMW!tr
AVGWin32:RATX-gen [Trj]
Paloaltogeneric.ml

How to remove MSIL/Kryptik.ACPD?

MSIL/Kryptik.ACPD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment