Malware

MSIL/GenKryptik.FGAI malicious file

Malware Removal

The MSIL/GenKryptik.FGAI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/GenKryptik.FGAI virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine MSIL/GenKryptik.FGAI?


File Info:

crc32: 476ED03A
md5: d86922868602b785f595f06a0fe875bf
name: D86922868602B785F595F06A0FE875BF.mlw
sha1: 3bf566c302d65d9a0ce8ba8464935b4594885d88
sha256: a4d4332bfa88880a57d2aabf980ffa67ba399ca922c6d13a59e2577dbd80fc53
sha512: c5566eabab40a6be70e976f3fb312cccf40be7f46ac53cb63cf0068678f989e8dfea4adf6b097f1f392116141e2989a1d5bd184242398b3113c2ff45096d2e6a
ssdeep: 196608:FBZEk9jjXSKobI2e57AQ0KINzI6NQgMTbIJ+4f9q7fTA7zXoMsu4:Tv1W7bI2eOsOI6NknGM7b+4Msu4
type: PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 1.0.0.0
InternalName: mainplg.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName:
ProductVersion: 1.0.0.0
FileDescription:
OriginalFilename: mainplg.exe

MSIL/GenKryptik.FGAI also known as:

K7AntiVirusTrojan ( 0057d4e41 )
Elasticmalicious (high confidence)
DrWebTrojan.Packed2.43167
CynetMalicious (score: 99)
ALYacGen:Variant.Bulz.498529
CylanceUnsafe
SangforTrojan.MSIL.Witch.gen
AlibabaTrojan:MSIL/GenKryptik.f9f9925a
K7GWTrojan ( 0057d4e41 )
SymantecTrojan.Gen.2
ESET-NOD32a variant of MSIL/GenKryptik.FGAI
APEXMalicious
AvastWin64:Trojan-gen
KasperskyHEUR:Trojan.MSIL.Witch.gen
BitDefenderGen:Variant.Bulz.498529
NANO-AntivirusTrojan.Win64.Witch.ivzjtk
ViRobotTrojan.Win32.Z.Witch.8669184
MicroWorld-eScanGen:Variant.Bulz.498529
Ad-AwareGen:Variant.Bulz.498529
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0WF221
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.d86922868602b785
EmsisoftGen:Variant.Bulz.498529 (B)
AviraTR/Kryptik.ivyxv
MicrosoftTrojan:Win32/AgentTesla!ml
AegisLabTrojan.MSIL.Witch.4!c
ZoneAlarmHEUR:Trojan.MSIL.Witch.gen
GDataGen:Variant.Bulz.498529
McAfeeArtemis!D86922868602
MAXmalware (ai score=87)
VBA32Trojan.Packed
TrendMicro-HouseCallTROJ_GEN.R002C0WF221
RisingTrojan.Agent/MSIL!1.D71F (CLASSIC)
IkarusTrojan.MSIL.Krypt
MaxSecureTrojan.Malware.108560625.susgen
FortinetW32/Witch.FGAI!tr
AVGWin64:Trojan-gen
Paloaltogeneric.ml

How to remove MSIL/GenKryptik.FGAI?

MSIL/GenKryptik.FGAI removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment