Malware

MSIL/Kryptik.ZWU removal instruction

Malware Removal

The MSIL/Kryptik.ZWU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSIL/Kryptik.ZWU virus can do?

  • Presents an Authenticode digital signature
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Anomalous binary characteristics

How to determine MSIL/Kryptik.ZWU?



File Info:

crc32: 1EB49F25
md5: 9c5adc454f40d46e0e1ec8c83a041add
name: 9C5ADC454F40D46E0E1EC8C83A041ADD.mlw
sha1: e72912b0f7d3418f48f002cb8cc46091a1cbc403
sha256: a835ab595be21573d2444a8c6c2089c4b12cdf4465c5a8ab0127eab5178c5e56
sha512: 375d6838f29bbd21ec03d4818d6c687ca6a3ba0afe71dde645eb0ec7afc1c6655134edc5322115b3452a8795ed179f812436f4091ab548f4cf1b647581028895
ssdeep: 98304:QakP1M3Alr0VY63QlzgQHJeU4ak+FD5oN8WIZdCNvBPk76R4Se:QakP1M3Alr0VY63Qlz
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

LegalCopyright: Copyright (c) 2020 Wondershare. All rights reserved.
InternalName: Wondershare Filmora X.exe
FileVersion: 
.
CompanyName: Wondershare
ProductName: Wondershare Filmora
ProductVersion: 
.
FileDescription: Wondershare Filmora X
OriginalFilename: Wondershare Filmora X.exe
Translation: 0x0804 0x04b0

MSIL/Kryptik.ZWU also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.36463658
FireEyeGeneric.mg.9c5adc454f40d46e
CAT-QuickHealTrojanSpy.MSIL
ALYacTrojan.GenericKD.36463658
AegisLabTrojan.Win32.Malicious.4!c
SangforSuspicious.Win32.Artemis.9C5ADC454F40
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderTrojan.GenericKD.36463658
K7GWTrojan ( 00578be11 )
K7AntiVirusTrojan ( 00578be11 )
CyrenW32/Trojan.HWYS-3443
SymantecML.Attribute.HighConfidence
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan-Spy.MSIL.Stealer.gen
AlibabaTrojan:Win32/Kryptik.ali2000016
NANO-AntivirusTrojan.Win32.Stealer.iodgef
Ad-AwareTrojan.GenericKD.36463658
EmsisoftTrojan.GenericKD.36463658 (B)
F-SecureTrojan.TR/AD.RedLineSteal.qdbcu
McAfee-GW-EditionArtemis!Trojan
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
AviraTR/AD.RedLineSteal.qdbcu
Antiy-AVLTrojan[Spy]/MSIL.Stealer
MicrosoftTrojan:Win32/Ymacco.AA8D
GridinsoftTrojan.Win32.Kryptik.oa
ArcabitTrojan.Generic.D22C642A
ZoneAlarmHEUR:Trojan-Spy.MSIL.Stealer.gen
GDataTrojan.GenericKD.36463658
CynetMalicious (score: 85)
McAfeeArtemis!9C5ADC454F40
MAXmalware (ai score=86)
VBA32TScope.Trojan.MSIL
MalwarebytesSpyware.RedLineStealer
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Kryptik.ZWU
TrendMicro-HouseCallTROJ_GEN.R002H0CC821
TencentMsil.Trojan-spy.Stealer.Huzi
IkarusTrojan.MSIL.Crypt
FortinetMSIL/Kryptik.ZWI!tr
BitDefenderThetaGen:NN.ZemsilF.34608.@p3@aaDDTHcj
AVGWin32:Trojan-gen
Paloaltogeneric.ml
Qihoo-360Win32/TrojanSpy.RedLine.HgIASQUA

How to remove MSIL/Kryptik.ZWU?

MSIL/Kryptik.ZWU removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment