Malware

Should I remove “MSIL/Kryptik.ZPS”?

Malware Removal

The MSIL/Kryptik.ZPS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Kryptik.ZPS virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.ZPS?


File Info:

crc32: A0B6C7D7
md5: 083e0046bf1fa3e6f309af8301ced7f9
name: 083E0046BF1FA3E6F309AF8301CED7F9.mlw
sha1: 58c1176c2559992e112cea8fbcb489bbc79bf0f0
sha256: e16fca2ddc966a1a20b47df8c007cc64cda7f3a9f74f6f04a38d93f13324a379
sha512: 30f6757d7130528ecbb1b01a1146ec1ce28cae95e05ec70bb1d651a3acc8c17a2e28212f564b1c92ca3fd770646af6b4b439fe35c38963295ad6e295efbdb844
ssdeep: 6144:Vr+ETteKXLDpA6MdwV8j2h7ZXl53Jd3mrqpVNsbahnCoYiS9lTZRgsMuj6g6Isr:VaEtXLDJnl5FpfsuCP99wsRj6lM
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2018-2021 Dietary fiber
Assembly Version: 0.9.7.0
InternalName: x629x6afx987eezCNQx645s.exe
FileVersion: 0.9.7.0
CompanyName: Dietary fiber
LegalTrademarks:
Comments: Total Carbohydrate
ProductName: Crackers Cholesterol
ProductVersion: 0.9.7.0
FileDescription: Crackers Cholesterol
OriginalFilename: x629x6afx987eezCNQx645s.exe

MSIL/Kryptik.ZPS also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.36325167
FireEyeGeneric.mg.083e0046bf1fa3e6
McAfeeRDN/Generic PWS.y
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005779901 )
BitDefenderTrojan.GenericKD.36325167
K7GWTrojan ( 005779901 )
BitDefenderThetaGen:NN.ZemsilCO.34804.Em0@aOhippm
CyrenW32/MSIL_Kryptik.DBG.gen!Eldorado
SymantecTrojan.Gen.MBT
APEXMalicious
AvastWin32:PWSX-gen [Trj]
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
AlibabaTrojan:Win32/Kryptik.ali2000016
ViRobotTrojan.Win32.Z.Kryptik.491520.NK
TencentMsil.Trojan-qqpass.Qqrob.Eew
Ad-AwareTrojan.GenericKD.36325167
EmsisoftTrojan.GenericKD.36325167 (B)
ComodoMalware@#3rep3yiogu7cn
F-SecureTrojan.TR/Kryptik.kelvt
DrWebTrojan.InjectNET.14
TrendMicroTROJ_FRS.0NA103BC21
McAfee-GW-EditionBehavesLike.Win32.Generic.gc
SophosMal/Generic-R + Troj/Kryptik-SL
IkarusTrojan.MSIL.Inject
AviraTR/Kryptik.kelvt
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:MSIL/AgentTesla.MTQ!MTB
GridinsoftTrojan.Win32.Downloader.sa
ArcabitTrojan.Generic.D22A472F
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agensla.gen
GDataMSIL.Trojan.PSE.UY44SW
CynetMalicious (score: 100)
AhnLab-V3Malware/Gen.RL_Reputation.C4331136
MAXmalware (ai score=82)
MalwarebytesTrojan.MalPack
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Kryptik.ZPS
TrendMicro-HouseCallTROJ_FRS.0NA103BC21
RisingTrojan.Kryptik!8.8 (CLOUD)
YandexTrojan.AvsArher.bSIdr7
SentinelOneStatic AI – Malicious PE
FortinetMSIL/GenKryptik.FBPG!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360Win32/Trojan.Generic.HgIASOwA

How to remove MSIL/Kryptik.ZPS?

MSIL/Kryptik.ZPS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment