Malware

What is “MSIL/Kryptik.OZV”?

Malware Removal

The MSIL/Kryptik.OZV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Kryptik.OZV virus can do?

  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine MSIL/Kryptik.OZV?


File Info:

crc32: 1AC557C1
md5: 0eb9585727652a1c199a90e38ce92230
name: 0EB9585727652A1C199A90E38CE92230.mlw
sha1: d5110d4f2500e5bf76c84d86920b46a3b6cff14f
sha256: 1a20b887057664075a9a8b7bec9ce0d2d24aff0c2ed2d83032ee8c58395c2d3d
sha512: 66b3c3dc91db5e50ac5d9f62ce8423b9aad92a191a5618eabcb92357cb4a6935dc3b80eef430d62b2443efbd24c03af3f6ee278efcd77b68ee568c9033f5637d
ssdeep: 1536:SKkR1xjbqUsQ0o1YniakXLrnRnK4pepDbJruOcSJF+crdOlBvIMnbn5y7OW8Dtb:Sh1JqUsQj1YniakXLrRnK4pepDbJrXc
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 1.0.0.0
InternalName: 00.exe
FileVersion: 1.0.0.0
ProductVersion: 1.0.0.0
FileDescription:
OriginalFilename: 00.exe

MSIL/Kryptik.OZV also known as:

K7AntiVirusTrojan ( 004c9fe61 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:MSIL.Heur2.Lagos.2
CylanceUnsafe
ZillyaTrojan.Generic.Win32.344993
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:MSIL/Kryptik.0cf66721
K7GWTrojan ( 004c9fe61 )
Cybereasonmalicious.727652
SymantecBackdoor.Ratenjay
ESET-NOD32a variant of MSIL/Kryptik.OZV
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Packed.Ursu-8015308-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:MSIL.Heur2.Lagos.2
NANO-AntivirusTrojan.Win32.Kryptik.extbvi
MicroWorld-eScanGen:MSIL.Heur2.Lagos.2
TencentWin32.Trojan.Generic.Jmn
Ad-AwareGen:MSIL.Heur2.Lagos.2
SophosMal/Generic-R + Mal/Mdrop-LE
ComodoBackdoor.MSIL.Bladabindi.ABC@6b1idd
BitDefenderThetaGen:NN.ZemsilF.34236.fm0@aCQXCHo
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PK121
McAfee-GW-EditionGenericRXGB-XX!0EB958572765
FireEyeGeneric.mg.0eb9585727652a1c
EmsisoftGen:MSIL.Heur2.Lagos.2 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.bzfzo
AviraHEUR/AGEN.1105775
MicrosoftBackdoor:MSIL/Bladabindi
ArcabitGen:MSIL.Heur2.Lagos.2
GDataGen:MSIL.Heur2.Lagos.2
AhnLab-V3Trojan/Win32.Bladabindi.C2403633
McAfeeGenericRXGB-XX!0EB958572765
MAXmalware (ai score=85)
VBA32Backdoor.MSIL.Bladabindi
PandaTrj/GdSda.A
YandexTrojan.Agent!8Czp9jba4cc
IkarusGen.MSIL.Heur2
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/GenKryptik.BFPL!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove MSIL/Kryptik.OZV?

MSIL/Kryptik.OZV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment