Malware

Should I remove “MSIL/Kryptik.ZLV”?

Malware Removal

The MSIL/Kryptik.ZLV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Kryptik.ZLV virus can do?

  • Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.ZLV?


File Info:

crc32: 3DF24984
md5: 232ca73080c10d2f1a5fccb15f06db21
name: 232CA73080C10D2F1A5FCCB15F06DB21.mlw
sha1: 71f09475b751f2af765834ac5067be14161b5915
sha256: 95be71d73799012c2d1d672f4624f0d4b02a0ab64b428b7cd8d7f0eb6a2d29ba
sha512: 02b0705a50b5a0c4018501b61f783a22084648cf3c99b7bb45681070628ed626801adfd9d0c10e843b11e1eef060801ae4ef57621984352f3ab4fcc54253ff9e
ssdeep: 12288:hdqf74VtPmkedGYbWIgObZjLob+QxJu4l0AlFMuMnXj:hy74VtZ4t6gcCQxJJzlN8T
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2016
Assembly Version: 1.0.0.0
InternalName: K3x76848Mx6cfdx636zx646x884c.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: MathLib
ProductVersion: 1.0.0.0
FileDescription: MathLib
OriginalFilename: K3x76848Mx6cfdx636zx646x884c.exe

MSIL/Kryptik.ZLV also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Strictor.84999
FireEyeGeneric.mg.232ca73080c10d2f
ALYacGen:Variant.Strictor.84999
MalwarebytesGeneric.Malware/Suspicious
CrowdStrikewin/malicious_confidence_60% (D)
BitDefenderGen:Variant.Strictor.84999
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
CyrenW32/Trojan.YFPK-0536
SymantecTrojan.Gen.2
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
Ad-AwareGen:Variant.Strictor.84999
EmsisoftGen:Variant.Strictor.84999 (B)
McAfee-GW-EditionArtemis!Trojan
SophosMal/Generic-S
eGambitUnsafe.AI_Score_99%
GridinsoftTrojan.Win32.Kryptik.ad!i
ArcabitTrojan.Strictor.D14C07
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agensla.gen
GDataGen:Variant.Strictor.84999
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Golroted.C3348895
McAfeeArtemis!232CA73080C1
MAXmalware (ai score=87)
ESET-NOD32a variant of MSIL/Kryptik.ZLV
TrendMicro-HouseCallTROJ_GEN.R06CH09AS21
YandexTrojan.AvsArher.bSIdr7
SentinelOneStatic AI – Malicious PE
FortinetMalicious_Behavior.SB
BitDefenderThetaGen:NN.ZemsilF.34780.6m0@ayZOIZd
AVGWin32:Malware-gen
AvastWin32:Malware-gen

How to remove MSIL/Kryptik.ZLV?

MSIL/Kryptik.ZLV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment