MSIL/Kryptik.UZM removal guide

The MSIL/Kryptik.UZM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.UZM virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.UZM?


File Info:
crc32: D167F9A6
md5: 317d701cdd2596358538d49026cca97e
name: gou.jpg
sha1: 4c03625c088a6f370851a92658a8b009b245ba45
sha256: 10801718ce01eddbf5dbf5ecbd645a838a042c26042fd467394c8a008485822a
sha512: 696679d8e8466d50a2c69ffbaaee9bfba430ad5caa03db7a329e3beea9eb7a320df36463b583cdaf3934f1cad81f7794ef28a8194ee81a85f9fb86f80984a037
ssdeep: 6144:GHnlg/at3BMyI9uYl9t5xHWa+8PqUCIu/2V0OItiI++F28sqKgkiwVNcwjhA:Gjdr09bxoUCIutf++88egkiDN
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: vvikid
Assembly Version: 4.0.2.0
InternalName: VOwRpsmryEOCySQBwym.exe
FileVersion: 4.0.2.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: CalculatorSector
ProductVersion: 4.0.2.0
FileDescription: CalculatorSector
OriginalFilename: VOwRpsmryEOCySQBwym.exe

MSIL/Kryptik.UZM also known as:

FireEye	Generic.mg.317d701cdd259635
Cylance	Unsafe
Sangfor	Malware
Cybereason	malicious.c088a6
BitDefenderTheta	Gen:NN.ZemsilF.34098.wm0@a0d9iId
Symantec	ML.Attribute.HighConfidence
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
Paloalto	generic.ml
AegisLab	Trojan.MSIL.Agensla.i!c
Endgame	malicious (high confidence)
F-Secure	Trojan.TR/Kryptik.iyeoj
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.fc
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
APEX	Malicious
Webroot	W32.Trojan.Gen
Avira	TR/Kryptik.iyeoj
Microsoft	Backdoor:MSIL/Noancooe.A
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Agensla.gen
AhnLab-V3	Trojan/Win32.MSIL.R328206
Acronis	suspicious
Malwarebytes	Trojan.MalPack.VND
ESET-NOD32	a variant of MSIL/Kryptik.UZM
Rising	Trojan.Kryptik!8.8 (CLOUD)
Fortinet	MSIL/GenKryptik.EFXB!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_90% (W)

How to remove MSIL/Kryptik.UZM?

MSIL/Kryptik.UZM removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X