Malware

MSIL/Kryptik.GJY removal

Malware Removal

The MSIL/Kryptik.GJY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Kryptik.GJY virus can do?

  • Presents an Authenticode digital signature
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine MSIL/Kryptik.GJY?


File Info:

crc32: 39CE1AB2
md5: 7c5f70b8711013141b6775231b5e948e
name: 7C5F70B8711013141B6775231B5E948E.mlw
sha1: eb079247cc080f2189f36c5d22854ca80c4da66f
sha256: ceb458f21d55856dcec36f0bac994cc0a38a07889a8380848df9f46e7c2e59aa
sha512: cf5c30bb986eb623ab534b48755ba2e20f64b4e92e52d0cd5c5dc3e9ef0391ad1d64e6a07df8e28e409f5a6b31bec52f811f3bb893d0659fa037dff72408acdb
ssdeep: 6144:LjD3QKLcAZWOMYLbDiafiXVTjctlFaFfxoza:LjDPAAYOc6tiFfu2
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2021
Assembly Version: 1.0.0.0
InternalName: soft.exe
FileVersion: 1.0.0.0
ProductName: WindowsApplication4
ProductVersion: 1.0.0.0
FileDescription: WindowsApplication4
OriginalFilename: soft.exe

MSIL/Kryptik.GJY also known as:

Elasticmalicious (high confidence)
DrWebTrojan.PackedNET.41
CynetMalicious (score: 99)
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:MSIL/Kryptik.ce882daa
K7GWTrojan ( 004f26821 )
Cybereasonmalicious.7cc080
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Kryptik.GJY
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan.MSIL.RRAT.gen
BitDefenderTrojan.GenericKD.37049273
MicroWorld-eScanTrojan.GenericKD.37049273
Ad-AwareTrojan.GenericKD.37049273
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZemsilF.34722.rq2@aumgzad
FireEyeGeneric.mg.7c5f70b871101314
EmsisoftTrojan.GenericKD.37049273 (B)
SentinelOneStatic AI – Malicious PE
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1121225
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Wacatac.B!ml
AegisLabTrojan.MSIL.RRAT.4!c
GDataWin32.Trojan.Agent.74P4KB
AhnLab-V3Malware/Win.AGEN.C4513329
McAfeeArtemis!7C5F70B87110
MAXmalware (ai score=83)
TrendMicro-HouseCallTROJ_GEN.R005H0CF621
IkarusTrojan.MSIL.Krypt
FortinetMSIL/Kryptik.GJY!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove MSIL/Kryptik.GJY?

MSIL/Kryptik.GJY removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment