Malware

MSIL/Kryptik.YOM (file analysis)

Malware Removal

The MSIL/Kryptik.YOM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Kryptik.YOM virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine MSIL/Kryptik.YOM?


File Info:

crc32: 8AE337E4
md5: 6c4a9f7c8893254e10bc2217cec26aef
name: 6C4A9F7C8893254E10BC2217CEC26AEF.mlw
sha1: 73a0452fbc80e1d7782888e28c46e49d7e01ebd1
sha256: 4c482b22456df2e37106d59a8afeccdeb736ee89b13b3de6968acee2f3ce9f25
sha512: 0266942220119efe2241b66604c51cf6e077118a4eb4904f8f4a3dbcd59067a325f416fb0dca8ef965e6749aae4e49eb1fb2e159919b6e513e89a599cb775491
ssdeep: 6144:1i3K0mpPA9f35LxOIXOwgB3rDU1YQao6oF1UtR2AAnV+ZqWIemSp6c1LyC8YfdG:sA4OpUn0EqCSiyyjK
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

MSIL/Kryptik.YOM also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.44439048
FireEyeGeneric.mg.6c4a9f7c8893254e
Qihoo-360Generic/HEUR/QVM03.0.30ED.Malware.Gen
McAfeeArtemis!6C4A9F7C8893
CylanceUnsafe
SangforMalware
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderTrojan.GenericKD.44439048
TrendMicroTROJ_GEN.R002C0WKD20
CyrenW32/MSIL_Kryptik.CCM.gen!Eldorado
SymantecML.Attribute.HighConfidence
AvastWin32:Trojan-gen
KasperskyBackdoor.Win32.Androm.uhhj
AlibabaBackdoor:Win32/Kryptik.109a182d
Ad-AwareTrojan.GenericKD.44439048
EmsisoftTrojan.GenericKD.44439048 (B)
InvinceaMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.Generic.tz
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
MAXmalware (ai score=89)
MicrosoftTrojan:Win32/Ymacco.AA4C
ArcabitTrojan.Generic.D2A61608
ZoneAlarmBackdoor.Win32.Androm.uhhj
GDataMSIL.Trojan-Stealer.AgentTesla.NV7PZV
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Asprox.C763113
BitDefenderThetaGen:NN.ZemsilF.34634.YnW@aOSmwkg
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Kryptik.YOM
TrendMicro-HouseCallTROJ_GEN.R002C0WKD20
RisingBackdoor.NetWiredRC!8.2AF (TFE:C:dQXs1qCmJXB)
IkarusTrojan.MSIL.Crypt
eGambitUnsafe.AI_Score_100%
FortinetMSIL/Kryptik.YOM!tr
AVGWin32:Trojan-gen
Cybereasonmalicious.fbc80e
Paloaltogeneric.ml

How to remove MSIL/Kryptik.YOM?

MSIL/Kryptik.YOM removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment