Malware

Should I remove “MSIL.Lynx.24”?

Malware Removal

The MSIL.Lynx.24 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL.Lynx.24 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Uses Windows utilities for basic functionality
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • Anomalous .NET characteristics
  • Creates a copy of itself

How to determine MSIL.Lynx.24?


File Info:

name: 260B57CB10D7347BD9DC.mlw
path: /opt/CAPEv2/storage/binaries/ffc07e7b5ec437d7b415d4306c501fca798d991a5d534f2ca03f668a5a124e8d
crc32: 3D174F4D
md5: 260b57cb10d7347bd9dc87c434b3b298
sha1: 39c9472f8023302d4c9ec68858dac8e6082187e1
sha256: ffc07e7b5ec437d7b415d4306c501fca798d991a5d534f2ca03f668a5a124e8d
sha512: 74eeb55e3716ded8561d38dc1c6cdf37ee829436885c2601fc334f87ae7d88957a7bbab880c5c4249ac6f42519cca921519835e34a9b2fd0a72a3cfdae3ac7c2
ssdeep: 3072:OrF2n7xboW1dPuXZL39o+nFpPDTcgORRuBrB:yFatdYZD9tTfK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17EC317343DEA501AF1B3EF765FE4B9DA9A1FB7733602546E2051034A0A23E41DED2939
sha3_384: 480273016bc4fbc25e786d0fc340f1ffbbefaba09301ae5650d7688797830c8e7b638136c7daddfa1617c383f678535b
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-07-01 21:07:29

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: XakFor.exe
LegalCopyright:
OriginalFilename: XakFor.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

MSIL.Lynx.24 also known as:

LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
McAfeeGenericRXAK-TJ!260B57CB10D7
Cylanceunsafe
ZillyaTrojan.Kryptik.Win32.1447351
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 004d2cca1 )
AlibabaTrojan:MSIL/Kryptik.f7da91b1
K7GWTrojan ( 004d2cca1 )
Cybereasonmalicious.f80233
BaiduMSIL.Trojan.Kryptik.j
VirITTrojan.Win32.Atros2.AACJ
CyrenW32/MSIL_Injector.QL.gen!Eldorado
SymantecBackdoor.Ratenjay
ESET-NOD32a variant of MSIL/Kryptik.DSS
APEXMalicious
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.MSIL.Lynx.24
NANO-AntivirusTrojan.Win32.Bladabindi.ferurc
MicroWorld-eScanGen:Variant.MSIL.Lynx.24
AvastWin32:Malware-gen
RisingMalware.Obfus/MSIL@AI.100 (RDM.MSIL2:TToWYYq3GeH7ToGBrbeVcg)
EmsisoftGen:Variant.MSIL.Lynx.24 (B)
F-SecureHeuristic.HEUR/AGEN.1305771
DrWebBackDoor.Bladabindi.12258
VIPREGen:Variant.MSIL.Lynx.24
McAfee-GW-EditionBehavesLike.Win32.Generic.cz
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.260b57cb10d7347b
SophosMal/Kryptik-BA
IkarusTrojan.MSIL.Crypt
JiangminTrojan.Generic.ciemx
AviraHEUR/AGEN.1305771
MAXmalware (ai score=100)
Antiy-AVLTrojan/Win32.AGeneric
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.MSIL.Lynx.24
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.MSIL.Lynx.24
GoogleDetected
AhnLab-V3Trojan/Win32.Zbot.R195517
ALYacGen:Variant.MSIL.Lynx.24
MalwarebytesMachineLearning/Anomalous.100%
PandaTrj/CI.A
TencentWin32.Trojan.Generic.Cgow
YandexTrojan.Agent!rW19FWNVn1g
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/CoinMiner.BHP!tr
BitDefenderThetaGen:NN.ZemsilF.36722.hm0@a8xQY8e
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove MSIL.Lynx.24?

MSIL.Lynx.24 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment