Malware

MSIL/GenKryptik.EWEK removal tips

Malware Removal

The MSIL/GenKryptik.EWEK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/GenKryptik.EWEK virus can do?

  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine MSIL/GenKryptik.EWEK?


File Info:

crc32: DC6A4D74
md5: ab8ddc55a6b798187cc7924ae6001798
name: AB8DDC55A6B798187CC7924AE6001798.mlw
sha1: 4f93dd86016e276ec38e71999952923912efe146
sha256: 4414c8df54f58d1e7a1075bf3659d7a30a3ee850ddf60c00a4904eae5b14fc24
sha512: 424607bbd5a29778bfcae63fcd6e5d28162438df1104b8fceb7703caf7d8477426e07eec3630b89e8bb9d674b37b8b186d4443bdf544cb309b1a1dcb5fa70c64
ssdeep: 6144:NsanPNdr09hJEH/vn9vt26IZ46/u5aRxs+1t+wL3vOdxM0LMsdcfuTG6R3zhj3+:1W/Xxb1t73vOMsdcf0FFSXnK
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: xa9 2019-2020 Adobe. All rights reserved.
Assembly Version: 5.3.1.470
InternalName: Hecvaqv33.exe
FileVersion: 5.3.1.470
CompanyName: Adobe Inc.
Comments: Creative Cloud Desktop
ProductName: Creative Cloud Desktop
ProductVersion: 5.3.1.470
FileDescription: Creative Cloud Desktop
OriginalFilename: Hecvaqv33.exe

MSIL/GenKryptik.EWEK also known as:

Elasticmalicious (high confidence)
FireEyeGeneric.mg.ab8ddc55a6b79818
McAfeePWS-FCSX!AB8DDC55A6B7
CylanceUnsafe
SangforMalware
CrowdStrikewin/malicious_confidence_100% (D)
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan.MSIL.Vobfus.gen
AlibabaTrojan:MSIL/GenKryptik.aa67be2c
TencentWin32.Trojan.Inject.Auto
McAfee-GW-EditionPWS-FCSX!AB8DDC55A6B7
SophosML/PE-A
SentinelOneStatic AI – Malicious PE
MicrosoftTrojan:Win32/Woreflint.A!cl
ZoneAlarmHEUR:Trojan.MSIL.Vobfus.gen
CynetMalicious (score: 100)
BitDefenderThetaGen:NN.ZemsilF.34634.Om0@a4daqpj
MalwarebytesSpyware.FormBook
ESET-NOD32a variant of MSIL/GenKryptik.EWEK
TrendMicro-HouseCallTROJ_GEN.R06CH06KN20
RisingMalware.FakeXLS@CV!1.6AC3 (CLASSIC)
IkarusTrojan.Inject
eGambitUnsafe.AI_Score_100%
FortinetMSIL/GenKryptik.EWXC!tr
Cybereasonmalicious.6016e2

How to remove MSIL/GenKryptik.EWEK?

MSIL/GenKryptik.EWEK removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment