What is “MSIL/Kryptik.HXX”?

The MSIL/Kryptik.HXX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.HXX virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSIL/Kryptik.HXX?


File Info:
crc32: BC312817
md5: 39c4d3c00e3ccad0b4935ccdd678ede7
name: 39C4D3C00E3CCAD0B4935CCDD678EDE7.mlw
sha1: 2e800939dc872b95b6b76f129aed3e77a7bccbed
sha256: cb102ef11e84eb5813bbd7614f5a635e9b1f53adccb99f3c32df8a64b6b0e1fe
sha512: 6a002ce73247cd9711a81651b71aa1c4e04f2c05de3da2428c76d38db14f4a8d733a6063830ca27f48e174abd35ad319f0eed0359ae319cb15b4003fd962cfbb
ssdeep: 192:ApgDSD6jjIAxxHXR2oSLrLVFoo5jirwhTw5+HG/7m2e:AuDSDqIAxxHXg93LvooNirwV8eGK2e
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x007f 0x04b0
LegalCopyright:  
InternalName: final-veil
FileVersion: 0.0.0.0
CompanyName:  
LegalTrademarks:  
Comments:  
ProductName:  
ProductVersion:  
FileDescription:  
OriginalFilename: final-veil.exe

MSIL/Kryptik.HXX also known as:

K7AntiVirus	Trojan ( 0050062e1 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Starter.7246
Cynet	Malicious (score: 100)
Cylance	Unsafe
Zillya	Trojan.Generic.Win32.901039
Sangfor	Trojan.Win32.Generic.ky
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Leivion.6694d297
K7GW	Trojan ( 0050062e1 )
Symantec	Trojan Horse
ESET-NOD32	a variant of MSIL/Kryptik.HXX
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Starter.ewfqjs
Tencent	Win32.Trojan.Generic.Lmuu
Sophos	Mal/Generic-R + Troj/Rozena-D
Comodo	Malware@#1il89s0e4dz7i
BitDefenderTheta	Gen:NN.ZemsilF.34266.am0@aOECa8
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Trojan-Veil-FOJV!39C4D3C00E3C
FireEye	Generic.mg.39c4d3c00e3ccad0
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.cdxtg
Avira	TR/Rozena.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.25BA58E
Microsoft	Trojan:MSIL/Bladabindi.DI!MTB
ZoneAlarm	HEUR:Trojan.Win32.Generic
AhnLab-V3	Trojan/Win32.Swrort.C2467428
McAfee	Trojan-Veil-FOJV!39C4D3C00E3C
VBA32	TScope.Trojan.MSIL
Panda	Trj/CI.A
Yandex	Trojan.Agent!4cK0rv/DD50
Ikarus	Trojan.MSIL.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Veliev.H!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove MSIL/Kryptik.HXX?

MSIL/Kryptik.HXX removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X