MSIL/Kryptik.ZSB (file analysis)

The MSIL/Kryptik.ZSB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Kryptik.ZSB virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/Kryptik.ZSB?


File Info:
crc32: 47D234B2
md5: 249e62cf9baed4725d621109467b9212
name: 249E62CF9BAED4725D621109467B9212.mlw
sha1: 453f1fc901ce4e9e32d638b553fa1c2721379302
sha256: a717f13ed10b05c55dea1f2551da0f2d2fb2e49cd153da93be3fdd618c5cee6a
sha512: 4de906a1c43ae7cda5a4ebe2913f82fec268ae62e151b832d90c834f20658de7f5014df534bcf25ed073074c7f00bc721bbd45ea498e93713fd87f1bb53fa4ab
ssdeep: 12288:k7M8J6cDIJCiZgVm2WCDE5ZeWk6BWVubz18ALABlxx:k48J1DGZSm2ZseWbWV6zX8BlX
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2019 4;4G5F@J;>D:JAF
Assembly Version: 1.0.0.0
InternalName: httt.exe
FileVersion: 9.14.19.24
CompanyName: 4;4G5F@J;>D:JAF
Comments: A=HD4JEG;EED4??A<3
ProductName: 4>:656;B@6J3GBH5>
ProductVersion: 9.14.19.24
FileDescription: 4>:656;B@6J3GBH5>
OriginalFilename: httt.exe

MSIL/Kryptik.ZSB also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.36371043
Qihoo-360	Win32/Trojan.Generic.HwMAZRsA
McAfee	RDN/GenericM
Cylance	Unsafe
AegisLab	Trojan.Win32.Malicious.4!c
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005781611 )
BitDefender	Trojan.GenericKD.36371043
K7GW	Trojan ( 005781611 )
CrowdStrike	win/malicious_confidence_90% (W)
BitDefenderTheta	Gen:NN.ZemsilF.34574.4m0@aqT2Pz
Cyren	W32/MSIL_Kryptik.AIK.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Trojan:MSIL/Kryptik.0a74507b
ViRobot	Trojan.Win32.Z.Wacatac.929792
Ad-Aware	Trojan.GenericKD.36371043
Emsisoft	Trojan.GenericKD.36371043 (B)
Comodo	Malware@#1cvws71de91yw
DrWeb	Trojan.Inject4.7335
TrendMicro	Trojan.MSIL.MALREP.THBAIBA
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
FireEye	Generic.mg.249e62cf9baed472
Sophos	Mal/Generic-S
Ikarus	Trojan-Spy.HawkEye
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:MSIL/FormBook.MS!MTB
Arcabit	Trojan.Generic.D22AFA63
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Trojan.GenericKD.36371043
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Gen.RL_Reputation.C4341748
MAX	malware (ai score=84)
Malwarebytes	Generic.Malware/Suspicious
ESET-NOD32	a variant of MSIL/Kryptik.ZSB
TrendMicro-HouseCall	Trojan.MSIL.MALREP.THBAIBA
Fortinet	MSIL/Kryptik.ZSB!tr
AVG	Win32:PWSX-gen [Trj]
Cybereason	malicious.901ce4
Paloalto	generic.ml

How to remove MSIL/Kryptik.ZSB?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSIL/Kryptik.ZSB (file analysis)