Malware

MSIL/Kryptik.ZYU removal instruction

Malware Removal

The MSIL/Kryptik.ZYU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Kryptik.ZYU virus can do?

  • The binary likely contains encrypted or compressed data.

How to determine MSIL/Kryptik.ZYU?


File Info:

crc32: 660A3A9F
md5: 5d229451e53371f2da5356fd73bfd5a3
name: 5D229451E53371F2DA5356FD73BFD5A3.mlw
sha1: 6649bafea13a3d220773bee82e169236e4449ffe
sha256: 157a9e039322f4f93b20c8a4a792e205e14c1cd0d67b7205b40fafd9d1dfb951
sha512: 6a4b913e085557b159ec0f873961de4540cbafe5931ee775356937a7d9f7df36123166b8d6aa653e0bc6f709243fbfd947f19fedbe2e8e51effa7034a3049dba
ssdeep: 12288:m1vhDLOS3mbs6Mgc8AR4H4iv6fTflqOgD7HP2zLE/nHpCpVW:61Kwmo6Y89y7NbgH+3E/nHpyW
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: PrimaryIdentitySelector
Assembly Version: 2.65.7.1
InternalName: TimeSpanStyles.exe
FileVersion: 2.55.0.0
CompanyName: PrimaryIdentitySelector
LegalTrademarks:
Comments: InputBlockSize
ProductName: ExtendedNormalizationForms
ProductVersion: 2.55.0.0
FileDescription: ExtendedNormalizationForms
OriginalFilename: TimeSpanStyles.exe

MSIL/Kryptik.ZYU also known as:

Elasticmalicious (high confidence)
DrWebTrojan.PackedNET.570
CynetMalicious (score: 90)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 005790901 )
CyrenW32/MSIL_Kryptik.DML.gen!Eldorado
ESET-NOD32a variant of MSIL/Kryptik.ZYU
APEXMalicious
AvastWin32:PWSX-gen [Trj]
KasperskyHEUR:Trojan.MSIL.Bingoml.gen
BitDefenderTrojan.GenericKD.45877139
MicroWorld-eScanTrojan.GenericKD.45877139
TencentMsil.Trojan.Bingoml.Swkw
Ad-AwareTrojan.GenericKD.45877139
SophosMal/Generic-S + Troj/TeslaA-ACO
F-SecureTrojan.TR/AD.XetimaLogger.yhvhw
McAfee-GW-EditionArtemis!Trojan
FireEyeTrojan.GenericKD.45877139
EmsisoftTrojan.Crypt (A)
SentinelOneStatic AI – Malicious PE
AviraTR/AD.XetimaLogger.yhvhw
eGambitUnsafe.AI_Score_58%
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/AgentTesla!ml
ArcabitTrojan.Generic.D2BC0793
AegisLabTrojan.MSIL.Bingoml.4!c
ZoneAlarmHEUR:Trojan.MSIL.Bingoml.gen
GDataTrojan.GenericKD.45877139
AhnLab-V3Trojan/Win.Kryptik.R371482
McAfeeRDN/Generic.dx
MAXmalware (ai score=86)
MalwarebytesTrojan.MalPack
PandaTrj/GdSda.A
RisingTrojan.Kryptik!8.8 (CLOUD)
IkarusTrojan.MSIL.Inject
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Kryptik.ZYP!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Bingoml.HgIASQkA

How to remove MSIL/Kryptik.ZYU?

MSIL/Kryptik.ZYU removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment