What is “MSIL/Kryptik.ADOU”?

The MSIL/Kryptik.ADOU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.ADOU virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous binary characteristics

How to determine MSIL/Kryptik.ADOU?


File Info:
name: 4ED00629425B85BCE6E3.mlw
path: /opt/CAPEv2/storage/binaries/1b940af289a23fc3da4c63965c2a9730d55ed8349a87c2adf865fc7f965686cd
crc32: 778BEF45
md5: 4ed00629425b85bce6e3f6d775ad9c4a
sha1: 92c2d71ff654c11d6459fe7d7cdef25529b9b885
sha256: 1b940af289a23fc3da4c63965c2a9730d55ed8349a87c2adf865fc7f965686cd
sha512: 0d19b514041c0a6f936acb063858d5b4eef239a2df94d242cdd2f89ed508b116cca0b2013400207e1525fa6a50d18f267b1d994ab9d1cfbdb784487b24c83ef2
ssdeep: 24576:Bg17P47B7P47B/3jVKMI7CcIB5B1HDZuY:StQl7QlvECxzB1H
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AC65BE2132B1AE9CD52E47F744F491B006B6AC45AE2EDB9F76F13E2E7D321821116363
sha3_384: c29f0b609e2ba3f9ec49bf46ef712cf26c19beb7a123576be1b9779c2e7cb35fe48aab6896558d2ec577f1f6565dcaff
ep_bytes: ff250020400000000000000000000000
timestamp: 1992-05-28 04:57:59

Version Info:
CompanyName: Adobe Inc
FileDescription: Adobe Download Manager
FileVersion: 2.0.0.604s
InternalName: Adobe Download Manager
LegalCopyright: Copyright 2019 Adobe Inc. All rights reserved.
OriginalFilename: Adobe Download Manager
ProductName: Adobe Download Manager
ProductVersion: 2.0.0.604s
Translation: 0x0409 0x04b0

MSIL/Kryptik.ADOU also known as:

Lionic	Trojan.MSIL.Noon.l!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Inject4.21031
MicroWorld-eScan	Trojan.GenericKD.47513765
FireEye	Generic.mg.4ed00629425b85bc
ALYac	Trojan.GenericKD.47513765
Cylance	Unsafe
K7AntiVirus	Trojan ( 0058b16a1 )
Alibaba	TrojanSpy:MSIL/Kryptik.ec290b62
K7GW	Trojan ( 0058b16a1 )
Cyren	W32/MSIL_Agent.CFH.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.ADOU
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Spy.MSIL.Noon.gen
BitDefender	Trojan.GenericKD.47513765
Avast	Win32:MalwareX-gen [Trj]
Tencent	Msil.Trojan-spy.Noon.Piai
Ad-Aware	Trojan.GenericKD.47513765
Emsisoft	Trojan.GenericKD.47513765 (B)
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Trojan.GenericKD.47513765
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Tiggre!rfn
AhnLab-V3	Trojan/Win.Generic.C4799347
McAfee	GenericRXQX-MV!4ED00629425B
MAX	malware (ai score=82)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Malware.AI.74155993
APEX	Malicious
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat.ARN.H
AVG	Win32:MalwareX-gen [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)

How to remove MSIL/Kryptik.ADOU?

MSIL/Kryptik.ADOU removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X