MSIL/Kryptik.XIJ removal

The MSIL/Kryptik.XIJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.XIJ virus can do?

Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.XIJ?


File Info:
crc32: C5B8A8B1
md5: 25a53b5fdbe19e341d674b816175d4c9
name: 01308.exe
sha1: 94d9ad37e73e089eaa967ab433351992a3aee500
sha256: d5231355835fc25fb6f9923639331084ff0ae602929793c263e01eda38d2fa1b
sha512: baf0f1b5e7454e99485be3a16dd5d19cdde08f71bebf596f854cb0c1a89d640de23caa777cae96bba22ededc587dae9814794f6fc4b0ce8ff9f921d67aaaf59c
ssdeep: 6144:NS1FFkBGs5bc5tHBonRQ11OVqqCrbMPSTsuXlQHzsTBOtWcOi+NTj:NS1zkkNtheQaRCrbSR2lCiTj
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: 01308.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: 01308.exe

MSIL/Kryptik.XIJ also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.34352609
FireEye	Generic.mg.25a53b5fdbe19e34
ALYac	Trojan.GenericKD.34352609
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 0056c6e41 )
Alibaba	Trojan:MSIL/AgentTesla.8dec30f6
K7GW	Trojan ( 0056c6e41 )
Cybereason	malicious.7e73e0
TrendMicro	Possible_SMNEGASTEAL
BitDefenderTheta	Gen:NN.ZemsilF.34152.Dm0@aSdx97f
Cyren	W32/MSIL_Kryptik.AHE.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
ClamAV	Win.Malware.Formbook-7399661-0
GData	Trojan.GenericKD.34352609
Kaspersky	HEUR:Trojan-Spy.MSIL.Noon.gen
BitDefender	Trojan.GenericKD.34352609
Paloalto	generic.ml
Rising	Trojan.Kryptik!8.8 (CLOUD)
Ad-Aware	Trojan.GenericKD.34352609
Comodo	.UnclassifiedMalware@0
F-Secure	Heuristic.HEUR/AGEN.1133819
Invincea	heuristic
Avira	HEUR/AGEN.1133819
Arcabit	Trojan.Generic.D20C2DE1
AegisLab	Trojan.Multi.Generic.4!c
ZoneAlarm	HEUR:Trojan-Spy.MSIL.Noon.gen
Microsoft	Trojan:MSIL/AgentTesla.Z!MTB
Cynet	Malicious (score: 85)
McAfee	Artemis!25A53B5FDBE1
MAX	malware (ai score=83)
Malwarebytes	Backdoor.Agent.PGen
ESET-NOD32	a variant of MSIL/Kryptik.XIJ
TrendMicro-HouseCall	Possible_SMNEGASTEAL
Tencent	Msil.Trojan-spy.Noon.Hrpd
Ikarus	Trojan-Spy.Keylogger.AgentTesla
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.XHV!tr
AVG	Win32:PWSX-gen [Trj]
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	Generic/HEUR/QVM03.0.385B.Malware.Gen

How to remove MSIL/Kryptik.XIJ?

MSIL/Kryptik.XIJ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X