Should I remove “MSIL/Kryptik.AEED”?

The MSIL/Kryptik.AEED is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.AEED virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous binary characteristics

How to determine MSIL/Kryptik.AEED?


File Info:
name: 8B1C585CDF7040ACB42D.mlw
path: /opt/CAPEv2/storage/binaries/a8c391d28cecbe668ede6f140afb8045fc4b4da9bfe5eef50744115e2f6404d8
crc32: DB9CE183
md5: 8b1c585cdf7040acb42de05515b7fb00
sha1: 7c9ba89260d1ee7593791d2010e0532e975fffe4
sha256: a8c391d28cecbe668ede6f140afb8045fc4b4da9bfe5eef50744115e2f6404d8
sha512: b7a8a918be0bbf347604025cddf184b675b5665bea8a43030f9fe4ee11dc7bf4e8fe39bbc8c25655b6cee1d54d15d909192cc6dc00950439abb1bd69e30a1c91
ssdeep: 12288:el5TnKY36h8GlfXsIY8yMCa7ND/ls3vBE:ONuDlPS8yMdB23vK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T133C4382A73605F99F13A6F7EC927440483F6A413D733F69BB9691CD91823E04CE5E622
sha3_384: e23dc048b22eae337003a4e74b8f70330a5a123e9d2d3fe277e34cd7698db622e9764b3daf5fd0f1fc3842627ec65ae1
ep_bytes: ff250020400000000000000000000000
timestamp: 1976-03-26 03:43:00

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: tsmgprs
FileVersion: 1.0.0.0
InternalName: tsmgprs.exe
LegalCopyright: Copyright ©  2008
LegalTrademarks: 
OriginalFilename: tsmgprs.exe
ProductName: tsmgprs
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/Kryptik.AEED also known as:

Lionic	Trojan.Win32.Malicious.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.48181967
FireEye	Generic.mg.8b1c585cdf7040ac
ALYac	Trojan.GenericKD.48181967
Cylance	Unsafe
Sangfor	Trojan.MSIL.Scar.gen
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of MSIL/Kryptik.AEED
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
Kaspersky	HEUR:Trojan.MSIL.Scar.gen
BitDefender	Trojan.GenericKD.48181967
Ad-Aware	Trojan.GenericKD.48181967
Emsisoft	Trojan.GenericKD.48181967 (B)
TrendMicro	TROJ_GEN.R002C0PB222
McAfee-GW-Edition	BehavesLike.Win32.Fareit.hh
Sophos	Mal/Generic-S
Paloalto	generic.ml
GData	MSIL.Trojan.BSE.DSPUSK
Antiy-AVL	Trojan/Generic.ASMalwS.351B449
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.C4950544
McAfee	RDN/Generic.dx
MAX	malware (ai score=99)
VBA32	Malware-Cryptor.MSIL.AgentTesla.Heur
Malwarebytes	Backdoor.Quasar
TrendMicro-HouseCall	TROJ_GEN.R002C0PB222
Rising	Trojan.Generic/MSIL@AI.98 (RDM.MSIL:1qhBSr2UB+m55c8TVeY4hQ)
Yandex	Trojan.Kryptik!M8dEKuxOV+E
SentinelOne	Static AI – Malicious PE
Fortinet	PossibleThreat.PALLAS.H
BitDefenderTheta	Gen:NN.ZemsilF.34212.Hm0@aqbOPFo
AVG	Win32:RATX-gen [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.300983.susgen

How to remove MSIL/Kryptik.AEED?

MSIL/Kryptik.AEED removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X