MSIL/Kryptik.GFR (file analysis)

The MSIL/Kryptik.GFR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.GFR virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.GFR?


File Info:
crc32: 709BB745
md5: 95ade08cc8a9145ee35aa09462a89a54
name: 95ADE08CC8A9145EE35AA09462A89A54.mlw
sha1: 323ac2f6454e61e08dc5c8d09481b091cbdecca6
sha256: 999ef75ffb93a58bf11600e7e17a9fc15ae9909be5f112d128fefcb90adb1a29
sha512: bbc09d1fc301143c7dae688e13d018e2790d8910742ac7601bda2f57da5bb92913e69dfa8903b48b6d1cdf7c82da645769264ab4155f8ad1d5465f8afba9073a
ssdeep: 3072:pwVnq0qI8UwdF6zYzebBefV6NF1V7aGhnrs7KeT/bb6XZfEuy644mBOyQkmFJHK:pwpz8UwdszYDfFeyhz2MnAlF
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
0: [No Data]

MSIL/Kryptik.GFR also known as:

K7AntiVirus	Trojan ( 004f93d51 )
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ransom.Samsam.8
ALYac	Gen:Variant.Ransom.Samsam.8
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 004f93d51 )
Cybereason	malicious.cc8a91
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.GFR
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.MSIL.Generic
BitDefender	Gen:Variant.Ransom.Samsam.8
Tencent	Msil.Trojan.Generic.Huft
Ad-Aware	Gen:Variant.Ransom.Samsam.8
Sophos	Mal/Generic-S
Comodo	Malware@#2ufg1p5z6rzg6
BitDefenderTheta	Gen:NN.ZemsilF.34688.viW@aGHBut
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.ft
FireEye	Generic.mg.95ade08cc8a9145e
Emsisoft	Gen:Variant.Ransom.Samsam.8 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSIL.jbxf
Avira	TR/Dropper.Gen
ZoneAlarm	HEUR:Trojan.MSIL.Generic
GData	Gen:Variant.Ransom.Samsam.8
McAfee	Artemis!95ADE08CC8A9
MAX	malware (ai score=98)
Panda	Trj/CI.A
Rising	Dropper.Generic!8.35E (CLOUD)
Yandex	Trojan.Agent!on7AhbZwVWA
Ikarus	Trojan.MSIL.Crypt
Fortinet	MSIL/Kryptik.GFR!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove MSIL/Kryptik.GFR?

MSIL/Kryptik.GFR removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X