Malware

MSIL/Kryptik.ZRH (file analysis)

Malware Removal

The MSIL/Kryptik.ZRH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSIL/Kryptik.ZRH virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.ZRH?



File Info:

crc32: A7530C7C
md5: 42e06d3213f0d6aa88948aae99165f2b
name: 42E06D3213F0D6AA88948AAE99165F2B.mlw
sha1: 9752c143519d8d17276f9da4e338fb9580f3c727
sha256: 7ffcfe208773bc49ef7a0e832fe117592b8eaf83484ebc9cfe9c64eb354aadec
sha512: 10d2bd239e2e019633af58e006d3d9084d6d1128742174dc729a8480b40e2e867cb2ab80c2a9b432fe959ecf294f203449f65b9d0e69ed967c2f1ef95a6d6860
ssdeep: 24576:T77RYU6Z7iYtU+wkxB2ccN+Vrd9dgKUIU1mj:SRZ7iYtIvMpU1mj
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 5E 1992
Assembly Version: 78.19.0.0
InternalName: WriteEventErrorCode.exe
FileVersion: 78.19.0.0
CompanyName: 
LegalTrademarks: 
Comments: Young's Applied Therapeutics
ProductName: Koda-Kimble
ProductVersion: 78.19.0.0
FileDescription: Koda-Kimble
OriginalFilename: WriteEventErrorCode.exe

MSIL/Kryptik.ZRH also known as:

Elasticmalicious (high confidence)
Qihoo-360Win32/Trojan.Generic.HwMAUpcA
McAfeeRDN/Generic.grp
CylanceUnsafe
AegisLabTrojan.Multi.Generic.4!c
SangforTrojan.Win32.Save.a
BitDefenderTrojan.GenericKD.45739570
K7GWTrojan ( 00577f691 )
Cybereasonmalicious.3519d8
ArcabitTrojan.Generic.D2B9EE32
BitDefenderThetaGen:NN.ZemsilF.34574.9m0@aiK7fug
CyrenW32/MSIL_Kryptik.DDR.gen!Eldorado
SymantecTrojan.Gen.2
ESET-NOD32a variant of MSIL/Kryptik.ZRH
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Spy.MSIL.Noon.gen
AlibabaTrojanSpy:MSIL/Kryptik.dbac6e79
MicroWorld-eScanTrojan.GenericKD.45739570
Ad-AwareTrojan.GenericKD.45739570
EmsisoftTrojan.GenericKD.45739570 (B)
Comodo.UnclassifiedMalware@0
DrWebTrojan.PackedNET.543
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
FireEyeGeneric.mg.42e06d3213f0d6aa
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
WebrootW32.Trojan.Gen
MAXmalware (ai score=82)
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Woreflint.A!cl
ZoneAlarmHEUR:Trojan-Spy.MSIL.Noon.gen
GDataTrojan.GenericKD.45739570
MalwarebytesMalware.AI.4103220850
RisingTrojan.Woreflint!8.F5EA (CLOUD)
IkarusTrojan.MSIL.Inject
FortinetMSIL/Kryptik.ZPV!tr
AVGWin32:RATX-gen [Trj]
AvastWin32:RATX-gen [Trj]
CrowdStrikewin/malicious_confidence_60% (W)

How to remove MSIL/Kryptik.ZRH?

MSIL/Kryptik.ZRH removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment