Troj/Kryptik-JR removal tips

The Troj/Kryptik-JR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Troj/Kryptik-JR virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Troj/Kryptik-JR?


File Info:
name: 72E8576B16C93F998389.mlw
path: /opt/CAPEv2/storage/binaries/aa8aa7abc925024ba0ce19428e914aa4c0498808e01060375822f5025aa110d4
crc32: 9BC10338
md5: 72e8576b16c93f998389897901b1b95f
sha1: 1e0292c9f2a0c41425d8416179e2dbfb4da43071
sha256: aa8aa7abc925024ba0ce19428e914aa4c0498808e01060375822f5025aa110d4
sha512: 2cd978f09803696bca3c379d9adacc7ff471d7d0ebb46ed28f5f83729d651a4ae2e44381ee3421c72e99f4ec052160924617594235314d03b6d718f063ef6acd
ssdeep: 192:G8jQzZMhljh30NfwJkUbAgZqjcHXRo+y05Mu4xASj3CSvEnc:gKXjuNfwJZAjjcHX+1+Sj3J4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19A52404645EC622FF8F62FB39BF179E8C2D7F2A4482A69FC10C415825722D44EA73572
sha3_384: 6252f0730789f65166b2eb0af30eb55fae2d0fd20615ff8e375e6d0519d1b19fc76939f11b257104c35182b66b062d9d
ep_bytes: ff250020400000000000000000000000
timestamp: 2048-04-03 18:39:18

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Testapp
FileVersion: 1.0.0.0
InternalName: Testapp.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: Testapp.exe
ProductName: Testapp
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Troj/Kryptik-JR also known as:

Lionic	Trojan.MSIL.Shelma.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.InjectNET.5
MicroWorld-eScan	Trojan.GenericKD.38135165
FireEye	Generic.mg.72e8576b16c93f99
McAfee	Artemis!72E8576B16C9
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0055b4f51 )
Alibaba	Trojan:MSIL/Shelma.3cb223ba
K7GW	Trojan ( 0055b4f51 )
Cybereason	malicious.9f2a0c
BitDefenderTheta	Gen:NN.ZemsilF.34062.am0@a0ZroGj
Cyren	W32/MSIL_Troj.AHQ.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Rozena.P
APEX	Malicious
Kaspersky	HEUR:Trojan.MSIL.Shelma.gen
BitDefender	Trojan.GenericKD.38135165
Avast	Win32:TrojanX-gen [Trj]
Ad-Aware	Trojan.GenericKD.38135165
Emsisoft	Trojan.GenericKD.38135165 (B)
TrendMicro	TROJ_GEN.R002C0RKS21
McAfee-GW-Edition	Artemis!Trojan
Sophos	Troj/Kryptik-JR
SentinelOne	Static AI – Malicious PE
GData	Trojan.GenericKD.38135165
Jiangmin	Trojan.MSIL.almbx
Avira	HEUR/AGEN.1139834
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
AhnLab-V3	Malware/Win32.RL_Generic.C3453168
ALYac	Trojan.GenericKD.38135165
MAX	malware (ai score=86)
Malwarebytes	Malware.AI.1962205450
TrendMicro-HouseCall	TROJ_GEN.R002C0RKS21
Ikarus	Trojan.MSIL.Rozena
Fortinet	MSIL/Veliev.H!tr
AVG	Win32:TrojanX-gen [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_90% (W)
MaxSecure	Trojan.Malware.300983.susgen

How to remove Troj/Kryptik-JR?

Troj/Kryptik-JR removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X