Should I remove “MSIL/Kryptik.JJC”?

The MSIL/Kryptik.JJC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.JJC virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine MSIL/Kryptik.JJC?


File Info:
name: 1BB798AAEE2D0CA46622.mlw
path: /opt/CAPEv2/storage/binaries/8a5646b74a42005247bcafe45717ba377ec8b5ed1b8e3dafcfda69bb17040b6d
crc32: 9383A3EE
md5: 1bb798aaee2d0ca46622c40385375430
sha1: a1d132d539afd22a505993dd79c82674926e2bcc
sha256: 8a5646b74a42005247bcafe45717ba377ec8b5ed1b8e3dafcfda69bb17040b6d
sha512: 9512bf7f781fa440e3d8cad4c812fec5c78c7d24b3823202ab5d86e95d50271d0cbf464457b4b3c48a4e1b695907afc07076aa63db7961af0c8439d398c0a09c
ssdeep: 1536:1qY6ju92xPQTqVmIfsckOasZp0dZp7EbpLj:1qY6xmqAIfsckONy7EbpLj
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T117A38E0837D88B17DBFD4F3859B011414BF2E1175B17EB0E4EC959B6297B3850A60BAB
sha3_384: 38b89527f5413a6771eb3303f3ec01e86e7d36707a04a7ce15e767fef099bf4b23baf7d3ed78907eec2a7d2afc46711d
ep_bytes: ff250020400000000000000000000000
timestamp: 2011-12-03 18:46:59

Version Info:
Translation: 0x0000 0x04b0
Comments: Administration
CompanyName: plugin-hwid
FileDescription: Application
FileVersion: 1.1.1.1
InternalName: HardwareID.exe
LegalCopyright: CopyrightHere
LegalTrademarks: TrademarkHere
OriginalFilename: HardwareID.exe
ProductName: AdministrationProduct
ProductVersion: 1.1.1.1
Assembly Version: 2.2.2.2

MSIL/Kryptik.JJC also known as:

Lionic	Trojan.MSIL.Agent.4!c
MicroWorld-eScan	Gen:Heur.MSIL.Androm.3
FireEye	Generic.mg.1bb798aaee2d0ca4
ALYac	Gen:Heur.MSIL.Androm.3
Cylance	unsafe
Zillya	Trojan.Agent.Win32.287135
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanPSW:MSIL/Mintluks.ed76884e
K7GW	Password-Stealer ( 00499dba1 )
K7AntiVirus	Password-Stealer ( 00499dba1 )
Arcabit	Trojan.MSIL.Androm.3
BitDefenderTheta	Gen:NN.ZemsilF.36662.gm0@aqFg9fm
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Kryptik.JJC
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	Trojan.MSIL.Agent.jyt
BitDefender	Gen:Heur.MSIL.Androm.3
NANO-Antivirus	Trojan.Win32.Kryptik.dcmfoi
Avast	Win32:Trojan-gen
Tencent	Msil.Trojan.Agent.Tdkl
Emsisoft	Gen:Heur.MSIL.Androm.3 (B)
F-Secure	Trojan.TR/Spy.Gen
DrWeb	Trojan.AVKill.15678
VIPRE	Gen:Heur.MSIL.Androm.3
McAfee-GW-Edition	Artemis!Trojan
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Generic.lmuf
Webroot	W32.Trojan.Gen
Avira	TR/Spy.Gen
Antiy-AVL	Trojan/MSIL.Agent
Xcitium	Malware@#3lcmrmq4p3j0o
Microsoft	PWS:MSIL/Mintluks.A
ZoneAlarm	Trojan.MSIL.Agent.jyt
GData	Gen:Heur.MSIL.Androm.3
McAfee	Artemis!1BB798AAEE2D
MAX	malware (ai score=94)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/CI.A
Rising	Spyware.KeyLogger!1.CA52 (CLASSIC)
Ikarus	Trojan-Spy.MSIL.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.F
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS

How to remove MSIL/Kryptik.JJC?

MSIL/Kryptik.JJC removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X