MSIL/Kryptik.ADII removal

The MSIL/Kryptik.ADII is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.ADII virus can do?

Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.ADII?


File Info:
crc32: A67DCE12
md5: c536c44320e069d687e629f675a21669
name: C536C44320E069D687E629F675A21669.mlw
sha1: 7f2837cfc41410279b647ee690cd4f7ad70e1d89
sha256: 0335b5131f288d3ba7d9620f05078726afe6ff2b8bc84a4f99e77aed1a6d27ae
sha512: 1d3dd3c453183b0261bde8b779d8fa41c07e996003c15969e18d426f78d4dc7a8251fc9c69fa4eedb4f4b5016d7a13cbac47bb5cc4b22fb5e92069ba6d233126
ssdeep: 6144:MYxouDl4cLqNOvCE1eBKgkDT5H8lQhBQUw3vuvuOq0:zGM7sO5eBKdNPC3vuvuL0
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021 xJMSzNQUy
Assembly Version: 0.96.61.92
InternalName: eZSqkxd.exe
FileVersion: 0.96.61.92
CompanyName: xJMSzNQUy
LegalTrademarks: 
Comments: hSQzyxz
ProductName: hSQzyxz
ProductVersion: 0.96.61.92
FileDescription: hSQzyxz
OriginalFilename: eZSqkxd.exe

MSIL/Kryptik.ADII also known as:

Cylance	Unsafe
Sangfor	Suspicious.Win32.AgentTesla-FDCV.C536C44320E0
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:Win32/runner.ali1000123
ESET-NOD32	a variant of MSIL/Kryptik.ADII
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	HEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefender	Trojan.GenericKD.37916680
MicroWorld-eScan	Trojan.GenericKD.37916680
Ad-Aware	Trojan.GenericKD.37916680
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZemsilF.34236.vm2@aqEdOOd
McAfee-GW-Edition	AgentTesla-FDCV!C536C44320E0
FireEye	Generic.mg.c536c44320e069d6
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Trojan.GenericKD.37916680
McAfee	AgentTesla-FDCV!C536C44320E0
MAX	malware (ai score=86)
Malwarebytes	MachineLearning/Anomalous.97%
TrendMicro-HouseCall	TROJ_GEN.R002H0CJV21
Yandex	Trojan.Agent!YCLuocL77Wo
Ikarus	Win32.Outbreak
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/GenKryptik.FMRS!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml

How to remove MSIL/Kryptik.ADII?

MSIL/Kryptik.ADII removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X