MSIL/Kryptik.GBD information

The MSIL/Kryptik.GBD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.GBD virus can do?

Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.GBD?


File Info:
crc32: F5265ACC
md5: 85b0c541f8a0c3c3c408bb86a29fa7a7
name: 85B0C541F8A0C3C3C408BB86A29FA7A7.mlw
sha1: 1bcc03714259d91532af6574dc40fa8efb7403e4
sha256: 237c3f9195ac07a1ded7e0b68315e57b89ee0449d72c2ba4df8c67d01c072c32
sha512: f32e0a0818eadf1fece356303eee419bf0ac353c8713d9a87e30d9369a3a0e6777ef40a947c49f8f0d68b9da3f7527d0ef4530fc5dd9a4bf0345d2b0bc839d22
ssdeep: 12288:xUA2zcQDaqC2Ru/BH89B2k5XY3K96j06gChLGu2pHWZiK:WAAFCsOcL24QLyuBt
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: llkm11.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: llkm11
ProductVersion: 1.0.0.0
FileDescription: llkm11
OriginalFilename: llkm11.exe

MSIL/Kryptik.GBD also known as:

K7AntiVirus	Trojan ( 004eeae31 )
Cynet	Malicious (score: 99)
Cylance	Unsafe
Sangfor	Trojan.Win32.Generic.ky
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Trojan:MSIL/Kryptik.39bfeff8
K7GW	Trojan ( 004eeae31 )
Cybereason	malicious.14259d
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.GBD
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Kryptik.fgfbsu
Tencent	Win32.Trojan.Generic.Ebqm
Sophos	Mal/Generic-S
Comodo	Malware@#2nwxnis72oj4
BitDefenderTheta	Gen:NN.ZemsilF.34294.Hm0@aWaG5Kj
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.hh
FireEye	Generic.mg.85b0c541f8a0c3c3
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.cmril
Avira	HEUR/AGEN.1122309
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	Trojan/Generic.ASMalwS.2728647
Microsoft	Trojan:Win32/Occamy.C23
McAfee	Artemis!85B0C541F8A0
Panda	Trj/GdSda.A
Yandex	Trojan.Agent!7tZbZL/NMU8
Ikarus	Trojan.MSIL.Crypt
Fortinet	MSIL/Kryptik.GBD!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml

How to remove MSIL/Kryptik.GBD?

MSIL/Kryptik.GBD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X