MSIL/Kryptik.AJQX removal

The MSIL/Kryptik.AJQX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.AJQX virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine MSIL/Kryptik.AJQX?


File Info:
name: 2945E382970F23A149AD.mlw
path: /opt/CAPEv2/storage/binaries/b9bf86ca557127ec61bbbaf9675686ee155186f3b4f4d1d80bf94b17a04b7371
crc32: A134199D
md5: 2945e382970f23a149ad5b10a32e79cc
sha1: b392e3493f3b796984a2d5de278db240f7e732c7
sha256: b9bf86ca557127ec61bbbaf9675686ee155186f3b4f4d1d80bf94b17a04b7371
sha512: 9d6bb4f9aa80eb63083519331bb5c27e388dbfee35476f6b11b90556fb2ef806c3c865988929eeb23d529b60c932a7885b2778ea5f9ee3d1e5beae86e84b26a7
ssdeep: 49152:7q9irP9ZqCTT7UadcNh20yhnmhcJav3U56UZB1poQKhNb0cl/w:7qMrF577dC20y8fUPZDpxgb0X
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E9E5E006A5624F73C2A47F7098CB075E52B5C726A213EF17362F28D2A916270DB171FB
sha3_384: 0156d10f7ea6e40b4219867c6e5a28573eaca5e4281e92ec423f2f242567daf670cb2fa52845e92573c40a94b64c8ddc
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-09-18 01:48:37

Version Info:
CompanyName: 
FileDescription: 
FileVersion: 16.10.31418.88
InternalName: VisualStudio.Shell.Framework.dll
LegalCopyright: © All rights reserved.
OriginalFilename: VisualStudio.Shell.Framework.dll
ProductName: 
ProductVersion: 
Assembly Version: 16.0.0.0
Translation: 0x0000 0x04b0

MSIL/Kryptik.AJQX also known as:

MicroWorld-eScan	Trojan.MSIL.Basic.8.Gen
ClamAV	Win.Packed.Uztuby-10009381-0
FireEye	Generic.mg.2945e382970f23a1
Skyhigh	BehavesLike.Win32.Generic.wc
McAfee	Artemis!2945E382970F
Malwarebytes	Backdoor.DCRat
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 005690671 )
K7GW	Trojan ( 005690671 )
Arcabit	Trojan.MSIL.Basic.8.Gen
BitDefenderTheta	Gen:NN.ZemsilF.36792.cp0@aKxGrNi
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Kryptik.AJQX
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.MSIL.Dnoper.gen
BitDefender	Trojan.MSIL.Basic.8.Gen
Avast	Win32:Evo-gen [Trj]
Emsisoft	Trojan.MSIL.Basic.8.Gen (B)
F-Secure	Heuristic.HEUR/AGEN.1323342
VIPRE	Trojan.MSIL.Basic.8.Gen
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSIL.aotqv
Google	Detected
Avira	HEUR/AGEN.1323342
MAX	malware (ai score=83)
Microsoft	Program:Win32/Wacapew.C!ml
ZoneAlarm	HEUR:Trojan.MSIL.Dnoper.gen
GData	Trojan.MSIL.Basic.8.Gen
Varist	W32/MSIL_Agent.FVY.gen!Eldorado
AhnLab-V3	Trojan/Win.Generic.C5484342
ALYac	Trojan.MSIL.Basic.8.Gen
Cylance	unsafe
Rising	Trojan.Dnoper!8.10CB3 (TFE:dGZlOg3hFw/p7lyDRw)
Ikarus	Trojan.MSIL.Crypt
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove MSIL/Kryptik.AJQX?

MSIL/Kryptik.AJQX removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X