Malware

MSIL/Kryptik.AKUA removal guide

Malware Removal

The MSIL/Kryptik.AKUA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Kryptik.AKUA virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid

How to determine MSIL/Kryptik.AKUA?


File Info:

name: 79BE82E27DF8A9A667E8.mlw
path: /opt/CAPEv2/storage/binaries/918f142c654c49e5ff454b9faaaf15c5c65e17ba7762c78033f567a496c5ba0d
crc32: BC1ED202
md5: 79be82e27df8a9a667e8f79b8af97f17
sha1: 091cfea7648e4b6bc9c621b9a697209345c10d9c
sha256: 918f142c654c49e5ff454b9faaaf15c5c65e17ba7762c78033f567a496c5ba0d
sha512: bcbcac001369d31c56daa4db93091fa16f2f94ca0d21fb06df088ff9611ee2b71998da49c9cc3ffee4e64d1990ae4a63955634e524279ff700205e67b0e7c8e4
ssdeep: 24576:PLqKl24dlC/qBCjDzjGjlsDaKMnlHsPGNxN30Zd9cSA:j3l1jyDaSDGue+Lr
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T172757A4329CC91D5D06E84B8CC48F3BD06266E265616ED272DE0FE97BAB00525EF353E
sha3_384: e1ee30b617accbff1791ff144332599467c6d18e3d755586585f88fe3186964f5ff246bc4db44d5787d4fcee97b7b1f1
ep_bytes: ff250020400000000000000000000000
timestamp: 2024-01-30 15:16:42

Version Info:

Translation: 0x0000 0x04b0
Comments: Alternate FTP
CompanyName: Alternate Tools
FileDescription: Alternate FTP
FileVersion: 3.100.0.0
InternalName: FTP.exe
LegalCopyright: Copyright © 2024 Alternate Tools
LegalTrademarks: Alternate FTP
OriginalFilename: FTP.exe
ProductName: Alternate FTP
ProductVersion: 2017.0.0-beta1
Assembly Version: 3.100.0.0

MSIL/Kryptik.AKUA also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.Crypt.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.71436106
FireEyeGeneric.mg.79be82e27df8a9a6
CAT-QuickHealTrojan.Sonbokli
SkyhighArtemis!Trojan
McAfeeArtemis!79BE82E27DF8
Cylanceunsafe
SangforTrojan.Msil.Kryptik.V2ok
K7AntiVirusTrojan ( 005b14b61 )
AlibabaTrojan:MSIL/Kryptik.37504682
K7GWTrojan ( 005b14b61 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaGen:NN.ZemsilF.36744.Ln0@aaKzLO
VirITTrojan.Win32.MSIL_Heur.A
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Kryptik.AKUA
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.MSIL.Crypt.gen
BitDefenderTrojan.GenericKD.71436106
AvastWin32:PWSX-gen [Trj]
TencentMalware.Win32.Gencirc.13ffa2b7
EmsisoftTrojan.GenericKD.71436106 (B)
F-SecureTrojan.TR/Kryptik.nhxox
DrWebTrojan.PackedNET.2668
VIPRETrojan.GenericKD.71436106
SophosMal/Generic-S
IkarusTrojan.MSIL.Crypt
GDataTrojan.GenericKD.71436106
GoogleDetected
AviraTR/Kryptik.nhxox
Antiy-AVLTrojan/MSIL.Kryptik
ArcabitTrojan.Generic.D442074A
ZoneAlarmHEUR:Trojan.MSIL.Crypt.gen
MicrosoftTrojan:Win32/Leonem
VaristW32/ABRisk.GOOL-3035
ALYacTrojan.GenericKD.71436106
MAXmalware (ai score=85)
MalwarebytesTrojan.Crypt
PandaTrj/Chgt.AD
TrendMicro-HouseCallTrojanSpy.Win32.REDLINE.YXEBAZ
RisingMalware.Obfus/MSIL@AI.100 (RDM.MSIL2:VYT99aX1gvpZcJytBC32zQ)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Kryptik.AKUA!tr
AVGWin32:PWSX-gen [Trj]
DeepInstinctMALICIOUS

How to remove MSIL/Kryptik.AKUA?

MSIL/Kryptik.AKUA removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment