Malware

Should I remove “MSIL/Kryptik.VRB”?

Malware Removal

The MSIL/Kryptik.VRB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Kryptik.VRB virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.VRB?


File Info:

crc32: 76320DB2
md5: bd842fef3bfaa7fd7e83a81c06f58c87
name: cb.exe
sha1: 81c4a4b9fb1229a45ef550eccb868b0781e715aa
sha256: 59666cf77737eed737d385d0b932284eaa83468cc2c8e240ef2b0977caf029e6
sha512: 78f0adb43c0f28b46334934497c1e2dfc50933e569e011cb98865208e64de8679321c0ec16a77daa1b08c00d94d1903ab0c5e2239f8e63048a9e1dabfefcc128
ssdeep: 3072:k6V5z9scHxgUhgTsW7DRIJeFAJMeFAJzW7DRInLTqfAYxZwSHRYPy2rT2pNeZB0:kg5JHngzhIJeFA2eFAkhIPqffzHRCY
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2006 - 2019
Assembly Version: 0.0.0.0
InternalName: cb.exe
FileVersion: 4.6.7.9
CompanyName: f_4TQ6d$&J8aHi5c
Comments: Xt96/zEs3L_*p
ProductName: 4c=JW&8peA!9E{7
ProductVersion: 4.6.7.9
FileDescription: 4c=JW&8peA!9E{7
OriginalFilename: cb.exe

MSIL/Kryptik.VRB also known as:

MicroWorld-eScanTrojan.GenericKD.43065525
FireEyeGeneric.mg.bd842fef3bfaa7fd
ALYacTrojan.GenericKD.43065525
CylanceUnsafe
VIPRETrojan.Win32.Generic.pak!cobra
SangforMalware
K7AntiVirusTrojan ( 00565bb41 )
BitDefenderTrojan.GenericKD.43065525
K7GWTrojan ( 00565bb41 )
Cybereasonmalicious.9fb122
Invinceaheuristic
CyrenW32/MSIL_Kryptik.AQA.gen!Eldorado
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
GDataMSIL.Packed.Skaldring.D
KasperskyHEUR:Trojan-PSW.MSIL.Tepfer.gen
AlibabaTrojanPSW:MSIL/Kryptik.ceac9354
AegisLabTrojan.Win32.Malicious.4!c
RisingTrojan.GenKryptik!8.AA55 (CLOUD)
Ad-AwareTrojan.GenericKD.43065525
SophosMal/Generic-S
F-SecureTrojan.TR/Kryptik.vkorg
DrWebTrojan.PWS.Stealer.13052
TrendMicroTrojan.MSIL.WACATAC.THDBIBO
McAfee-GW-EditionRDN/Generic.dx
EmsisoftTrojan.GenericKD.43065525 (B)
SentinelOneDFI – Malicious PE
WebrootW32.Gen.pak
AviraTR/Kryptik.vkorg
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D29120B5
ZoneAlarmHEUR:Trojan-PSW.MSIL.Tepfer.gen
MicrosoftTrojan:Win32/Wacatac.C!ml
AhnLab-V3Trojan/Win32.Wacatac.C4083948
McAfeeRDN/Generic.dx
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Kryptik.VRB
TrendMicro-HouseCallTrojan.MSIL.WACATAC.THDBIBO
MAXmalware (ai score=84)
FortinetMSIL/GenKryptik.EJJT!tr
BitDefenderThetaGen:NN.ZemsilF.34108.sm0@aClxBJp
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360Generic/HEUR/QVM03.0.E4F6.Malware.Gen

How to remove MSIL/Kryptik.VRB?

MSIL/Kryptik.VRB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment