MSIL/GenKryptik.FHAA removal tips

The MSIL/GenKryptik.FHAA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/GenKryptik.FHAA virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/GenKryptik.FHAA?


File Info:
crc32: 4D172D17
md5: 371a1cba0ebacad844efa26ac81010c0
name: 371A1CBA0EBACAD844EFA26AC81010C0.mlw
sha1: 70d86a88483fc65e82e2b72d8d7e9801b95fa9df
sha256: 20b056235f35b9c92264e185b04938f2dd6b6850ed4923541576df92914eaad4
sha512: 8ec25595da266f42534ff36e1e8a83410f7086f26139609bb27b6a280de0375dea7223ea47e8e81178fac854142384e9a66059cb7b5800c97e19199bb8d406e9
ssdeep: 6144:CQ8ma9Rn6LwfRSitNsNpStWbIWdmHE7eNtyIfcUT/IyXFlnp9wdB3/uAdp:MmuxuwY2sNIAUEA1jJf3T/IyXFln2t/
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: 
Assembly Version: 15.0.4454.1000
InternalName: zeeemiii.exe
FileVersion: 15.0.4454.1000
CompanyName: Microsoft Corporation
LegalTrademarks: 
Comments: Microsoft PowerPoint
ProductName: Microsoft Office 2013
ProductVersion: 15.0.4454.1000
FileDescription: Microsoft PowerPoint
OriginalFilename: zeeemiii.exe

MSIL/GenKryptik.FHAA also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.540041
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (W)
Alibaba	Trojan:MSIL/GenKryptik.df39cc17
K7GW	Trojan ( 0057eb3e1 )
Cyren	W32/MSIL_Dropper.A.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/GenKryptik.FHAA
APEX	Malicious
Avast	Win32:CrypterX-gen [Trj]
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Trojan.GenericKD.46552379
MicroWorld-eScan	Gen:Variant.Bulz.540041
Ad-Aware	Gen:Variant.Bulz.540041
BitDefenderTheta	Gen:NN.ZemsilF.34770.Am0@a80@e9e
VIPRE	Trojan.Win32.Generic!BT
FireEye	Generic.mg.371a1cba0ebacad8
Emsisoft	Trojan.GenericKD.46552379 (B)
SentinelOne	Static AI – Malicious PE
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Bulz.D83D89
AegisLab	Trojan.Win32.Malicious.4!c
GData	Trojan.GenericKD.46552379
McAfee	PWS-FCZZ!371A1CBA0EBA
MAX	malware (ai score=86)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.ABRS!tr
AVG	Win32:CrypterX-gen [Trj]
Paloalto	generic.ml

How to remove MSIL/GenKryptik.FHAA?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSIL/GenKryptik.FHAA removal tips