Malware

MSIL/Kryptik.AFJY removal guide

Malware Removal

The MSIL/Kryptik.AFJY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSIL/Kryptik.AFJY virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine MSIL/Kryptik.AFJY?



File Info:

name: 463A6DD01F55CF4DA368.mlw
path: /opt/CAPEv2/storage/binaries/81cc412c98a821bad25b86df5b42222f4dafe8d20316d58be6232fb0935a5618
crc32: 6BD77103
md5: 463a6dd01f55cf4da368e01eb0bbb2d0
sha1: 7cd5ce274ec810a8d00f21950b005a289056af84
sha256: 81cc412c98a821bad25b86df5b42222f4dafe8d20316d58be6232fb0935a5618
sha512: 4c1e8ac2e833fca26ba05b2bbf87066d821bedd720333cb744dd3a10e1d9a36863798ce5d382f1248548e0fe60f4c0699ab673acd1e09c65af0078eda5219a96
ssdeep: 3072:du1uKG1MBjDv0VAFaaJjs5RgWFHuM2nPXlBCt3PjQq+a:E1uKG1oPThC72PXlBCt3PjQq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T159E3F79C766072DFC86BC972CEA82C64EA517477931F9203A05316AD9E0D99BCF190F3
sha3_384: f5617bddbeedd1da91a2dcb62ebaac6dd3e9a8ef1b91b4b793dbc1a34333ca348241faee1673b3098b945bfeeab9a2b5
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-08-04 14:50:19


Version Info:

Translation: 0x0000 0x04b0
Comments: GnjhFbnGdsqwet
CompanyName: VvgGyUkiIYTrf
FileDescription: Hg&5FgbgFty
FileVersion: 3.1.2.4
InternalName: Bump.exe
LegalCopyright: FgVbgTujKnbfe
LegalTrademarks: WsDerGhjjBgfdEw
OriginalFilename: Bump.exe
ProductName: GvhUyREfHgfr
ProductVersion: 3.1.2.4
Assembly Version: 4.1.2.4

MSIL/Kryptik.AFJY also known as:

BkavW32.AIDetectNet.01
tehtrisGeneric.Malware
MicroWorld-eScanGen:Trojan.Mardom.PN.12
FireEyeGeneric.mg.463a6dd01f55cf4d
McAfeeArtemis!463A6DD01F55
CylanceUnsafe
SangforTrojan.Win32.Save.a
Cybereasonmalicious.74ec81
BitDefenderThetaGen:NN.ZemsilF.34582.im0@aaXw2yp
CyrenW32/MSIL_Kryptik.COR.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/Kryptik.AFJY
KasperskyHEUR:Backdoor.MSIL.Bladabindi.gen
BitDefenderGen:Trojan.Mardom.PN.12
AvastWin32:RATX-gen [Trj]
Ad-AwareGen:Trojan.Mardom.PN.12
SophosML/PE-A
VIPREGen:Trojan.Mardom.PN.12
McAfee-GW-EditionArtemis
Trapminemalicious.high.ml.score
EmsisoftGen:Trojan.Mardom.PN.12 (B)
GDataGen:Trojan.Mardom.PN.12
AviraTR/Dropper.Gen
MicrosoftTrojan:MSIL/AgentTesla.LQL!MTB
CynetMalicious (score: 100)
Acronissuspicious
VBA32CIL.HeapOverride.Heur
ALYacGen:Trojan.Mardom.PN.12
MAXmalware (ai score=86)
APEXMalicious
RisingTrojan.Generic/MSIL@AI.97 (RDM.MSIL:v53cMqP2uoclVzt2i/dRsg)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Kryptik.AFJY!tr
AVGWin32:RATX-gen [Trj]
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove MSIL/Kryptik.AFJY?

MSIL/Kryptik.AFJY removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment