MSIL/Kryptik.JWY removal guide

The MSIL/Kryptik.JWY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.JWY virus can do?

Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.JWY?


File Info:
crc32: D8632C38
md5: b195c1378829170e366768dacb5334ce
name: B195C1378829170E366768DACB5334CE.mlw
sha1: b0a730a21b082320a7a9107dcca69473fec43825
sha256: 23bfe233bc7958d374d0ff4307cc49f2544599889ec81a62b79743162283a11b
sha512: 691da2fc5cf01b47790ad142483c680f52a5f34309cf1f61ca5db47863e0823fe55dac96b90a3dc0206889c57f112f9091a7608158a8939c32dc3473e0a5988d
ssdeep: 6144:Lce9+EzPAqzvyuXlak2ANVSosxSzBeAXw9S9ssZIiIfIvK4/oyHOwmYp3Am/e:LcW+0YoyuXjx6Se89YIcjse
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: tamara.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: tamara.exe

MSIL/Kryptik.JWY also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
Sangfor	Trojan.Win32.Dropper.buxin
CrowdStrike	win/malicious_confidence_100% (D)
Cybereason	malicious.21b082
Cyren	W32/A-17b8a5e1!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.JWY
APEX	Malicious
Avast	MSIL:GenMalicious-AAS [Trj]
Kaspersky	Trojan-Dropper.Win32.Agent.iiuw
Tencent	Win32.Trojan-dropper.Agent.Pefl
Sophos	ML/PE-A
Comodo	Malware@#jbpb4qp97iy4
BitDefenderTheta	Gen:NN.ZemsilF.34294.rm0@ayGry0n
VIPRE	Trojan-Dropper.Win32.Agent
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
FireEye	Generic.mg.b195c1378829170e
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1127601
eGambit	Unsafe.AI_Score_92%
Kingsoft	Win32.Troj.Agent.ii.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!B195C1378829
Panda	Generic Malware
Yandex	Trojan.DR.Agent!YbYIfF839N4
Ikarus	Trojan.MSIL.CoinMiner
Fortinet	W32/Agent.IIUW!tr
AVG	MSIL:GenMalicious-AAS [Trj]

How to remove MSIL/Kryptik.JWY?

MSIL/Kryptik.JWY removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X