MSIL/Kryptik.YVB malicious file

The MSIL/Kryptik.YVB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.YVB virus can do?

Presents an Authenticode digital signature
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.YVB?


File Info:
crc32: 5D417ED7
md5: 0c88222b8ec631b73dbf9ea4b3ae3613
name: 0C88222B8EC631B73DBF9EA4B3AE3613.mlw
sha1: 663f442c80b0ded9db92ac8d5bc60ad975f77ace
sha256: 42381fda66b581117e935a929786ec81ddb50bb88a827ac3960810305e07b853
sha512: 084038512c5766000e356772ca955a6c3d7c3dae528d9d3ef6d1b0db7b840dee377d4ab70a2c51f09d335eb7818203e8f121528965c3e8509168c807382b6543
ssdeep: 6144:rUopuj5eMLLJedeZ5baNCL32OoJDGsnA33d4fd3FeN/S8:FmvLLJlGLOoJD98T
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
Assembly Version: 4.10.209.0
InternalName: ds2.exe
FileVersion: 4.10.209.0
CompanyName: Microsoft Corporation
Comments: MSEInstall Package
ProductName: Microsoft Security Client
ProductVersion: 4.10.209.0
FileDescription: MSEInstall Package
OriginalFilename: ds2.exe

MSIL/Kryptik.YVB also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.35459238
FireEye	Generic.mg.0c88222b8ec631b7
McAfee	Artemis!0C88222B8EC6
BitDefender	Trojan.GenericKD.35459238
Cybereason	malicious.c80b0d
BitDefenderTheta	Gen:NN.ZemsilF.34658.Bm2@aSX@pA
Symantec	ML.Attribute.HighConfidence
Kaspersky	HEUR:Trojan.MSIL.Injuke.gen
Ad-Aware	Trojan.GenericKD.35459238
Sophos	Mal/Generic-S
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Trojan.GenericKD.35459238 (B)
Ikarus	Trojan.MSIL.Inject
Microsoft	Trojan:MSIL/AntiWD.YA!MTB
Arcabit	Trojan.Generic.D21D10A6
ZoneAlarm	HEUR:Trojan.MSIL.Injuke.gen
GData	Win32.Malware.DelWindef.16HIN1
Cynet	Malicious (score: 100)
MAX	malware (ai score=89)
APEX	Malicious
ESET-NOD32	a variant of MSIL/Kryptik.YVB
eGambit	PE.Heur.InvalidSig
AVG	FileRepMalware
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_70% (D)

How to remove MSIL/Kryptik.YVB?

MSIL/Kryptik.YVB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X