Categories: Malware

MSIL/Kryptik.PJS removal tips

The MSIL/Kryptik.PJS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Kryptik.PJS virus can do?

Presents an Authenticode digital signature
Possible date expiration check, exits too soon after checking local time
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine MSIL/Kryptik.PJS?


File Info:
name: 423142C795EA1AAE2989.mlwpath: /opt/CAPEv2/storage/binaries/d9f173ece998520a2fcacca41a17cd2427f5f7343cfbbdff9d280bca02653fbbcrc32: CA65E419md5: 423142c795ea1aae2989e4a0de8a211csha1: b82a68fd03cdd5e83b3488daf76e651772fcd0besha256: d9f173ece998520a2fcacca41a17cd2427f5f7343cfbbdff9d280bca02653fbbsha512: 281cffa529d4fdaf228d481bd69428f85471ff4b7fa0d83fb28d7831c030f6b3631f1238463e0291d02af6181ebdcf1e7eb2646c5e7c28467e485d5d07a76701ssdeep: 6144:RheI2CrPMPQ7Wh3HICOv8XmTjkLm8nfsxF7wjimovXwZ:mb7th3Hg82vkLnfOOimEXwZtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B1E4D23138EB7660D0A8B5F9341C99E0A5699D70E14C96E838FABD0C17F847BDE7824Dsha3_384: 1ca338053dd01282ac3ec128dad437919ce2fb48589c45f4ea239e2fe5bf0feaa9828f5673681a76aeb4def3f57cc7f2ep_bytes: ff250020400000000000000000000000timestamp: 1985-01-25 20:25:34
Version Info:
Translation: 0x0000 0x04b0Comments: iteyovewomobehuqojCompanyName: Ford Motor CoFileDescription: Static compression moduleFileVersion: 18.13.9.2InternalName: zplus1.exeLegalCopyright: Copyright © 2018 Ford Motor CoOriginalFilename: zplus1.exeProductName: Static compression moduleProductVersion: 18.13.9.2Assembly Version: 0.0.0.0

MSIL/Kryptik.PJS also known as:

MicroWorld-eScan	Trojan.MSIL.Basic.1.Gen
ALYac	Trojan.MSIL.Basic.1.Gen
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 0053b5881 )
Alibaba	Trojan:MSIL/Kryptik.4a5ba92f
K7GW	Trojan ( 0053b5881 )
Cybereason	malicious.795ea1
Cyren	W32/MSIL_Agent.DV.gen!Eldorado
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Kryptik.PJS
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.MSIL.Basic.1.Gen
NANO-Antivirus	Trojan.Win32.Kryptik.fhcczj
Avast	Win32:Malware-gen
Ad-Aware	Trojan.MSIL.Basic.1.Gen
Emsisoft	Trojan.MSIL.Basic.1.Gen (B)
Comodo	Malware@#mfkkvj47l8y6
DrWeb	Win32.HLLW.Autoruner2.30982
Zillya	Trojan.GenericKD.Win32.188613
McAfee-GW-Edition	Packed-FLW!423142C795EA
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.423142c795ea1aae
Sophos	ML/PE-A
Ikarus	Trojan.MSIL.Inject
GData	Win32.Backdoor.Agent.NPMA5Q
Jiangmin	Trojan.Generic.cpdqw
Avira	HEUR/AGEN.1234922
Microsoft	Backdoor:MSIL/Bladabindi
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	Packed-FLW!423142C795EA
MAX	malware (ai score=99)
Malwarebytes	Trojan.PasswordStealer.MSIL.Generic
Tencent	Win32.Trojan.Falsesign.Ozrt
Yandex	Trojan.Agent!C4UXeyeeLic
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/Kryptik.PJF!tr
BitDefenderTheta	Gen:NN.ZemsilF.34712.Om1@aq!TMsm
AVG	Win32:Malware-gen
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_100% (W)