MSIL/Kryptik.AGVT removal tips

The MSIL/Kryptik.AGVT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.AGVT virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine MSIL/Kryptik.AGVT?


File Info:
name: 74F81BE89CCD4CAECC48.mlw
path: /opt/CAPEv2/storage/binaries/eb64d210d636513b45eacbbc7cd2f907a816a0f7391ae254109cd0252698ed8a
crc32: FB534CD8
md5: 74f81be89ccd4caecc48d6777513abd0
sha1: 8e97cb80c1b8ac0f22464ad0acd48ddbd12a5da8
sha256: eb64d210d636513b45eacbbc7cd2f907a816a0f7391ae254109cd0252698ed8a
sha512: 441754e1fe1ad8144ab4462922c27448c32574b7927358431a3d4e62861ac135ef50e4f7f7fd40cfb95a77816f4c1680e029dea90724df880829317d1656a387
ssdeep: 12288:vy10PPJaxEOCf5lpLR6AlAuA4ntDqZiefBVk3Kt3VWwNYRuJO9loAn7N7PjIE:TA4nNqZigkc3VRKJcAn7FIE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11A058B34279A4F0BE0DACF38B4B0D1B057669D7AB92E8A86CAD46CF779122F05D0D543
sha3_384: 9914f96c16134ce8c1e161094774ef25fdccb585322303f6d7cb01ad75b9ff6e02ff54f5949e558da4a20a6f44b2df45
ep_bytes: ff25002000114d54726b000000004d54
timestamp: 2022-10-24 01:21:51

Version Info:
Translation: 0x0000 0x04b0
Comments: A toolkit for creating MIDI applications.
CompanyName: 
FileDescription: MIDI Toolkit
FileVersion: 5.0.0.0
InternalName: FTIK.exe
LegalCopyright: Leslie Sanford 2006
LegalTrademarks: 
OriginalFilename: FTIK.exe
ProductName: 
ProductVersion: 5.0.0.0
Assembly Version: 5.0.0.0

MSIL/Kryptik.AGVT also known as:

Bkav	W32.AIDetectMalware.CS
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Ransom.Loki.DBS
FireEye	Trojan.Ransom.Loki.DBS
CAT-QuickHeal	Trojan.Generic.TRFH530
Skyhigh	BehavesLike.Win32.Generic.ch
ALYac	Trojan.Ransom.Loki.DBS
Cylance	unsafe
Sangfor	Infostealer.Msil.AgentTesla.Vju4
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanPSW:MSIL/AgentTesla.2e55973e
K7GW	Trojan ( 00599ddf1 )
K7AntiVirus	Trojan ( 00599ddf1 )
VirIT	Trojan.Win32.MSIL_Heur.A
Symantec	Scr.Malcode!gdn34
tehtris	Generic.Malware
ESET-NOD32	a variant of MSIL/Kryptik.AGVT
APEX	Malicious
ClamAV	Win.Dropper.Nanocore-9976038-0
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefender	Trojan.Ransom.Loki.DBS
NANO-Antivirus	Trojan.Win32.Agensla.jtfyif
Avast	Win32:PWSX-gen [Trj]
Tencent	Malware.Win32.Gencirc.13bfa5bc
Emsisoft	Trojan.Ransom.Loki.DBS (B)
F-Secure	Heuristic.HEUR/AGEN.1310636
DrWeb	Trojan.PackedNET.738
VIPRE	Trojan.Ransom.Loki.DBS
TrendMicro	TROJ_GEN.R002C0DAA24
Trapmine	suspicious.low.ml.score
Sophos	Troj/MSIL-SYT
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.PSW.MSIL.eirc
Varist	W32/MSIL_Kryptik.IFN.gen!Eldorado
Avira	HEUR/AGEN.1310636
Antiy-AVL	Trojan[PSW]/MSIL.Agensla
Microsoft	Trojan:MSIL/AgentTesla.ALY!MTB
Arcabit	Trojan.Ransom.Loki.DBS
SUPERAntiSpyware	Trojan.Agent/Generic
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Agensla.gen
GData	MSIL.Trojan.PSE.Q7U1GE
AhnLab-V3	Trojan/Win.PWSX-gen.C5285656
McAfee	RDN/Generic PWS.y
Google	Detected
MAX	malware (ai score=84)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002C0DAA24
Rising	Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:94zBmIgwLMVF9/WU+60o3w)
Ikarus	Trojan.MSIL.Crypt
MaxSecure	Trojan.Malware.74499699.susgen
Fortinet	MSIL/GenKryptik.AGVY!tr
AVG	Win32:PWSX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove MSIL/Kryptik.AGVT?

MSIL/Kryptik.AGVT removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X