Malware

Mal/Generic-R + Troj/Kryptik-YI removal guide

Malware Removal

The Mal/Generic-R + Troj/Kryptik-YI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mal/Generic-R + Troj/Kryptik-YI virus can do?

  • Network activity detected but not expressed in API logs

How to determine Mal/Generic-R + Troj/Kryptik-YI?


File Info:

crc32: 5EDEEBA9
md5: f06010cbf89e396a78cebfd0456e1859
name: F06010CBF89E396A78CEBFD0456E1859.mlw
sha1: 33306e22ac0fa20a49cbbce252e08be91ac4414b
sha256: 5e088eb0eb669be278eeef2204005e705c88f5a215e985b53dc42b4f9853b4e4
sha512: 08d1aed5b3b797000fcf1005e5b3a4d991e0c68de0ec297238bc2822fe9d21d19d599f892aef7369cca8d2a5dca2dfac73fcf7441429153a66aa58a2039f1f29
ssdeep: 1536:xk1hG2+3EykKy1ymV3oe0alAb2qdlLSLY3c474VQKzHN1x095GAYEmbD4RTfuOE:xSG2+TkKy3oeDAnTH77451x095GA/Mw
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: Client-kd12.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: Client-kd12.exe

Mal/Generic-R + Troj/Kryptik-YI also known as:

K7AntiVirusTrojan ( 005690201 )
LionicTrojan.MSIL.AntiAV.4!c
Elasticmalicious (high confidence)
DrWebTrojan.EncoderNET.31368
CynetMalicious (score: 100)
CAT-QuickHealTrojan.MsilFC.S20328625
ALYacTrojan.MSIL.Basic.6.Gen
CylanceUnsafe
ZillyaTrojan.Basic.Win32.4983
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:MSIL/Filecoder.f8d7caa8
K7GWTrojan ( 005690201 )
Cybereasonmalicious.bf89e3
CyrenW32/MSIL_Thanos.A.gen!Eldorado
SymantecTrojan Horse
ESET-NOD32a variant of MSIL/Filecoder.Thanos.A
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
KasperskyHEUR:Trojan-Ransom.MSIL.Thanos.gen
BitDefenderTrojan.MSIL.Basic.6.Gen
NANO-AntivirusTrojan.Win32.AntiAV.iixuhr
MicroWorld-eScanTrojan.MSIL.Basic.6.Gen
TencentMsil.Trojan.Antiav.Eami
Ad-AwareTrojan.MSIL.Basic.6.Gen
SophosMal/Generic-R + Troj/Kryptik-YI
BitDefenderThetaGen:NN.ZemsilF.34050.gm0@ai!KnOp
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom.MSIL.THANOS.SM
McAfee-GW-EditionBehavesLike.Win32.Generic.ch
FireEyeGeneric.mg.f06010cbf89e396a
EmsisoftTrojan.MSIL.Basic.6.Gen (B)
SentinelOneStatic AI – Malicious PE
AviraTR/AntiAV.xbpoq
eGambitUnsafe.AI_Score_98%
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftRansom:MSIL/Cryptolocker.PDN!MTB
ArcabitTrojan.MSIL.Basic.6.Gen
GDataTrojan.MSIL.Basic.6.Gen
AhnLab-V3Malware/Win32.RL_Generic.C4295463
McAfeeRansom-Thanos!F06010CBF89E
MAXmalware (ai score=88)
MalwarebytesRansom.Thanos
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom.MSIL.THANOS.SM
YandexTrojan.AntiAV!FUJPQIzCTUs
IkarusTrojan-Ransom.Thanos
MaxSecureTrojan.Malware.116433596.susgen
FortinetMSIL/Filecoder_Thanos.A!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.AntiAV.HwMAfi8A

How to remove Mal/Generic-R + Troj/Kryptik-YI?

Mal/Generic-R + Troj/Kryptik-YI removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment