Malware

MSIL/Kryptik.ZZZ removal tips

Malware Removal

The MSIL/Kryptik.ZZZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Kryptik.ZZZ virus can do?

  • The binary likely contains encrypted or compressed data.

How to determine MSIL/Kryptik.ZZZ?


File Info:

crc32: 341EACD7
md5: 167af112e548804e1128b4c69f82d4f4
name: 167AF112E548804E1128B4C69F82D4F4.mlw
sha1: 84ccc187e9036b2259ef066560fb2a4e579b2fa6
sha256: 353d6c663d578a0648fd4c9fc9ff15254308707c009731372554149672686905
sha512: 73b61a3dbe0f9a23081d0b06ebd7f5a21b24e977cf80e38abf625a9ed14e23c0b11939d94cd29bc2ba2771deef53c94d0bd30bae6c401ee4b2a020634546ff5c
ssdeep: 24576:oclNjJmQS9U6fJVuUfXSexO0Pf5TDItGZ103uEdFvf:tyU6fJVjfXDxO85QsZ1muwFv
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: 2001 - 2020
Assembly Version: 3.5.7.9
InternalName: x6afex65cfvx643x698x6210dB.exe
FileVersion: 2.4.6.8
CompanyName: Alphabet INC
LegalTrademarks: Google Inc 2020
Comments: Google chrome Browser
ProductName: Google INC
ProductVersion: 2.4.6.8
FileDescription: Chrome Browser
OriginalFilename: x6afex65cfvx643x698x6210dB.exe

MSIL/Kryptik.ZZZ also known as:

Elasticmalicious (high confidence)
DrWebTrojan.Inject4.8883
CynetMalicious (score: 100)
CylanceUnsafe
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:MSIL/Generic.ef089f01
K7GWTrojan ( 0057932f1 )
K7AntiVirusTrojan ( 0057932f1 )
CyrenW32/MSIL_Kryptik.DNQ.gen!Eldorado
SymantecTrojan.Gen.2
ESET-NOD32a variant of MSIL/Kryptik.ZZZ
APEXMalicious
AvastWin32:PWSX-gen [Trj]
KasperskyHEUR:Trojan-Spy.MSIL.AveMaria.gen
BitDefenderTrojan.GenericKD.45900193
MicroWorld-eScanTrojan.GenericKD.45900193
TencentWin32.Trojan.Inject.Auto
Ad-AwareTrojan.GenericKD.45900193
SophosMal/Generic-S
F-SecureTrojan.TR/Dropper.MSIL.kvtbh
BitDefenderThetaGen:NN.ZemsilF.34608.0m0@aeJ3Tfk
TrendMicroTrojan.MSIL.MALREP.THCAEBA
McAfee-GW-EditionBehavesLike.Win32.Fareit.cc
FireEyeGeneric.mg.167af112e548804e
EmsisoftTrojan.Crypt (A)
SentinelOneStatic AI – Malicious PE
AviraTR/Dropper.MSIL.kvtbh
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Generic.D2BC61A1
AegisLabTrojan.Multi.Generic.4!c
ZoneAlarmHEUR:Trojan-Spy.MSIL.AveMaria.gen
GDataMSIL.Trojan-Stealer.AgentTesla.3SLYST
McAfeeRDN/Generic.grp
MAXmalware (ai score=85)
MalwarebytesTrojan.Crypt.MSIL
TrendMicro-HouseCallTrojan.MSIL.MALREP.THCAEBA
RisingTrojan.Kryptik!8.8 (CLOUD)
YandexTrojan.AvsArher.bUatV3
IkarusTrojan.MSIL.Crypt
FortinetMSIL/Kryptik.ZZZ!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Generic.HgIASQ0A

How to remove MSIL/Kryptik.ZZZ?

MSIL/Kryptik.ZZZ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment