MSIL/Kryptik.ACUX malicious file

The MSIL/Kryptik.ACUX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Kryptik.ACUX virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
The binary likely contains encrypted or compressed data.
Executed a process and injected code into it, probably while unpacking
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/Kryptik.ACUX?


File Info:
crc32: C802ED7C
md5: 2dafdbcb98d94410522fc877b76317cd
name: 2DAFDBCB98D94410522FC877B76317CD.mlw
sha1: af00ba3809d0fe623e702d2492016fd0d6758e00
sha256: 7357c095ad53d99a7ca93cda8a2c4994bbe5e7db1f7fbb6928186a3dbd0975ea
sha512: 74a481151e9341aeb59ede95a1fefeda80d3495d32ce2ead06efd3551d922981a7fa7276cab2fcd9565a2da3b5feb55281c3346a92f75a3dfffeadf60f30d419
ssdeep: 12288:XPH84IyFYpY7AtWY3xt1cSiiH5cIOtY/8QmwTx:04IyFcOwB+SiNNPQmG
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: UIntP.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: GameEngine
ProductVersion: 1.0.0.0
FileDescription: GameEngine
OriginalFilename: UIntP.exe

MSIL/Kryptik.ACUX also known as:

K7AntiVirus	Trojan ( 005689471 )
Lionic	Trojan.MSIL.Agensla.i!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:Win32/Kryptik.ali2000016
K7GW	Trojan ( 005689471 )
Cyren	W32/MSIL_Kryptik.FOS.gen!Eldorado
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of MSIL/Kryptik.ACUX
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefender	Trojan.GenericKD.37600116
MicroWorld-eScan	Trojan.GenericKD.37600116
Ad-Aware	Trojan.GenericKD.37600116
BitDefenderTheta	Gen:NN.ZemsilF.34142.Jm0@ay@5aUo
FireEye	Generic.mg.2dafdbcb98d94410
Emsisoft	Trojan.GenericKD.37600116 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/AD.Bladabindi.qbuse
Kingsoft	Win32.PSWTroj.Undef.(kcloud)
Microsoft	Trojan:MSIL/AgentTesla.AL!MTB
GData	MSIL.Trojan-Stealer.AgentTesla.MK28PK
AhnLab-V3	Trojan/Win.PWSX-gen.C4636684
McAfee	RDN/Generic.dx
MAX	malware (ai score=89)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.F0D1C00II21
Ikarus	Win32.SuspectCrc
Fortinet	Malicious_Behavior.SB
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml

How to remove MSIL/Kryptik.ACUX?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSIL/Kryptik.ACUX malicious file