Malware

Should I remove “MSIL/Kryptik.ZRD”?

Malware Removal

The MSIL/Kryptik.ZRD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSIL/Kryptik.ZRD virus can do?

  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.ZRD?



File Info:

crc32: 9E98E52B
md5: 2be2bd813f07842576f03aa5d7270f91
name: 2BE2BD813F07842576F03AA5D7270F91.mlw
sha1: 87f70ac05f914df3a83deb314b3729e9211ac6b6
sha256: 14cfd67c3c951abc14be2cd169d09d7361d346131438ffa7d83fcb63cb9e2a2c
sha512: 58ac00a6def29db6bd871178fd91a291a0ee3f79d3020ae7f8f45cf4ddd8f222a792db3a96df3d0906d93d4eec00ae6c0597f3288df11c77c4d781e96277daf7
ssdeep: 12288:vu+IcYvgtas4HWrp+t12pjskBiIaRG3Nd//XGM5EPJrl7nt83Tt0OyOa:G+W4tasGWNK2dJaQ3/XGyU9l7t0B0e
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2020
Assembly Version: 4.0.0.0
InternalName: x6a4yOx7684x6ccx987ex632Mux695.exe
FileVersion: 4.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: Neurology Ward
ProductName: Ward Manage
ProductVersion: 4.0.0.0
FileDescription: Ward Manage
OriginalFilename: x6a4yOx7684x6ccx987ex632Mux695.exe

MSIL/Kryptik.ZRD also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.45736139
FireEyeGeneric.mg.2be2bd813f078425
Qihoo-360Win32/Trojan.Crypt.HgIASPIA
McAfeeRDN/Generic.grp
CylanceUnsafe
AegisLabTrojan.MSIL.Crypt.4!c
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderTrojan.GenericKD.45736139
K7GWTrojan ( 00577f3c1 )
K7AntiVirusTrojan ( 00577f3c1 )
CyrenW32/MSIL_Troj.AFB.gen!Eldorado
SymantecTrojan.Gen.2
APEXMalicious
AvastWin32:PWSX-gen [Trj]
KasperskyHEUR:Trojan.MSIL.Crypt.gen
AlibabaTrojan:Win32/runner.ali1000123
ViRobotTrojan.Win32.Z.Agent.734208.CW
RisingTrojan.GenKryptik!8.AA55 (CLOUD)
Ad-AwareTrojan.GenericKD.45736139
EmsisoftTrojan.Crypt (A)
ComodoTrojWare.Win32.Agent.sqaad@0
F-SecureTrojan.TR/AD.AgentTesla.pjhcq
DrWebTrojan.Packed2.42845
TrendMicroTROJ_FRS.VSNTBG21
McAfee-GW-EditionRDN/Generic.grp
SophosMal/Generic-S + Troj/TeslaA-VU
SentinelOneStatic AI – Malicious PE
AviraTR/AD.AgentTesla.pjhcq
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:MSIL/AgentTesla.MRQ!MTB
ArcabitTrojan.Generic.D2B9E0CB
ZoneAlarmHEUR:Trojan.MSIL.Crypt.gen
GDataTrojan.GenericKD.45736139
CynetMalicious (score: 100)
AhnLab-V3Malware/Gen.RL_Reputation.R366595
ALYacSpyware.AgentTesla
MAXmalware (ai score=87)
MalwarebytesSpyware.TelegramBot
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Kryptik.ZRD
TrendMicro-HouseCallTROJ_FRS.VSNTBG21
TencentMsil.Trojan.Crypt.Hvjm
IkarusTrojan.Inject
FortinetMSIL/GenKryptik.FBRQ!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml
MaxSecureTrojan.Malware.300983.susgen

How to remove MSIL/Kryptik.ZRD?

MSIL/Kryptik.ZRD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment