Malware

MSIL/Kryptik.ZSL removal tips

Malware Removal

The MSIL/Kryptik.ZSL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Kryptik.ZSL virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.ZSL?


File Info:

crc32: FEA34EC6
md5: c18f42fb8db3fb2056840ab676ca56c3
name: C18F42FB8DB3FB2056840AB676CA56C3.mlw
sha1: 1439330e0040d9d99bea79f597c3bbf34abb241d
sha256: 07dff8b5c0341c9df30783dbe653b354281a629a33053d6457410b93d3dd833d
sha512: d0e2f4819000cf01b125092af65ac5525f863a294d1c74e003b10a5e43c10d89ca220d572a72bed08e1b8a81285457511161adaaa1ca523468e7f061a47bbc98
ssdeep: 12288:O7EoOvmok+nin+nin+ni7miRS0fayExjeRlsTiAmaGuGDK7bYchKhtkjlyLV7Zs:E9OOok+in+in+i7mic0OIRltAmaZ7Ec
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright (C) Take-Two Interactive Software, Inc.
Assembly Version: 2.0.7.5
InternalName: SubcategoryMembershipEntry.exe
FileVersion: 2.0.7.5
CompanyName: Take-Two Interactive Software, Inc.
LegalTrademarks:
Comments:
ProductName: Social Club UI
ProductVersion: 2.0.7.5
FileDescription: Social Club UI
OriginalFilename: SubcategoryMembershipEntry.exe

MSIL/Kryptik.ZSL also known as:

Elasticmalicious (high confidence)
McAfeeArtemis!C18F42FB8DB3
MalwarebytesTrojan.MalPack
AegisLabTrojan.MSIL.Taskun.4!c
SangforTrojan.Win32.Save.a
BitDefenderGen:Variant.Bulz.365038
K7GWTrojan ( 0057821f1 )
ArcabitTrojan.Bulz.D591EE
CyrenW32/MSIL_Kryptik.DFT.gen!Eldorado
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTrojan.MSIL.SUDLOADER.THBBOBA
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.MSIL.Taskun.gen
AlibabaTrojan:MSIL/Kryptik.127dcb37
NANO-AntivirusTrojan.Win32.GCS.dkpiay
MicroWorld-eScanGen:Variant.Bulz.365038
TencentMsil.Trojan.Taskun.Swup
Ad-AwareGen:Variant.Bulz.365038
SophosMal/Generic-S
Comodo.UnclassifiedMalware@0
TrendMicroTrojan.MSIL.SUDLOADER.THBBOBA
McAfee-GW-EditionArtemis!Trojan
FireEyeGen:Variant.Bulz.365038
EmsisoftGen:Variant.Bulz.365038 (B)
IkarusBackdoor.MSIL.Bladabindi
MAXmalware (ai score=87)
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:MSIL/NanoBot.D!MTB
ZoneAlarmHEUR:Trojan.MSIL.Taskun.gen
GDataGen:Variant.Bulz.365038
AhnLab-V3Malware/Win32.RL_Generic.C4342748
CylanceUnsafe
PandaTrj/GdSda.A
APEXMalicious
ESET-NOD32a variant of MSIL/Kryptik.ZSL
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Kryptik.ZSL!tr
AVGWin32:PWSX-gen [Trj]
AvastWin32:PWSX-gen [Trj]
Qihoo-360Win32/Trojan.Generic.HgIASPYA

How to remove MSIL/Kryptik.ZSL?

MSIL/Kryptik.ZSL removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment