Malware

MSIL/Kryptik.SET removal guide

Malware Removal

The MSIL/Kryptik.SET is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Kryptik.SET virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine MSIL/Kryptik.SET?


File Info:

crc32: 280A9987
md5: 9bf2cadfb65c0354ff1a34bffb7c7c9a
name: 9027.exe
sha1: 8492c784f2709bd98f5a9e6c088bf6531420581e
sha256: 27ff0c02c5da05a1aa403b0f4bce68a59a6637aeaca7618c47da891020ee5277
sha512: a64e1edb6cd555f8b37a8e98ce218842540218582b21e4d4af9aaec9c8f57bdf03495bfccaeb3e39b9adfc9917ba7b16ad55e223f4af9d2b4e526aa377890f5e
ssdeep: 12288:fRKwwPuOVwY9iO3XcKr1eGjdRgVnnGnEhGOWuEbxT:MwwVVEor1eG0n+0lWuMxT
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2009
Assembly Version: 0.0.0.0
InternalName: 9027.exe
FileVersion: 9.13.18.22
CompanyName: ipegutawufagekovif
Comments: igodesabiruqenaq
ProductName: ehefemiw
ProductVersion: 9.13.18.22
FileDescription: ehefemiw
OriginalFilename: 9027.exe

MSIL/Kryptik.SET also known as:

DrWebTrojan.DownLoader29.47169
MicroWorld-eScanGen:Heur.Jintor.1
FireEyeGeneric.mg.9bf2cadfb65c0354
Qihoo-360Win32/Trojan.BO.573
McAfeeRDN/Generic.fgr
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Malicious.4!c
SangforMalware
K7AntiVirusTrojan ( 005523991 )
BitDefenderGen:Heur.Jintor.1
K7GWTrojan ( 005523991 )
Cybereasonmalicious.fb65c0
TrendMicroBKDR_HPBLADABINDI.SMZ
BitDefenderThetaAI:Packer.7FF58BA71E
F-ProtW32/Trojan.SW.gen!Eldorado
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan.MSIL.NanoBot.gen
AlibabaTrojan:Win32/Malmail.ali1000112
NANO-AntivirusTrojan.Win32.NanoBot.ftjrkq
RisingBackdoor.Nanocore!8.F894 (CLOUD)
Ad-AwareGen:Heur.Jintor.1
EmsisoftGen:Heur.Jintor.1 (B)
ComodoMalware@#y3ehqkb18smw
F-SecureTrojan.TR/AD.Nanocore.ouvlp
ZillyaTrojan.NanoBot.Win32.2027
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.gc
Trapminemalicious.high.ml.score
SophosMal/Generic-S
IkarusTrojan.Inject
CyrenW32/Trojan.SW.gen!Eldorado
AviraTR/AD.Nanocore.ouvlp
FortinetMSIL/Kryptik.SET!tr
Antiy-AVLTrojan/MSIL.NanoBot
Endgamemalicious (high confidence)
ArcabitTrojan.Jintor.1
ZoneAlarmHEUR:Trojan.MSIL.NanoBot.gen
MicrosoftTrojan:Win32/Dynamer!rfn
Acronissuspicious
VBA32TScope.Trojan.MSIL
ALYacGen:Heur.Jintor.1
MAXmalware (ai score=96)
PandaTrj/Genetic.gen
ESET-NOD32a variant of MSIL/Kryptik.SET
TrendMicro-HouseCallBKDR_HPBLADABINDI.SMZ
TencentMsil.Trojan.Nanobot.Hyjq
YandexTrojan.NanoBot!
SentinelOneDFI – Malicious PE
GDataMSIL.Packed.Skaldring.D
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
MaxSecureTrojan.Malware.300983.susgen

How to remove MSIL/Kryptik.SET?

MSIL/Kryptik.SET removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment