Should I remove “MSIL/GenKryptik.FHYS”?

The MSIL/GenKryptik.FHYS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/GenKryptik.FHYS virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine MSIL/GenKryptik.FHYS?


File Info:
crc32: 64DD3180
md5: 335233464b6ae8c1927c1eae07b0b947
name: 335233464B6AE8C1927C1EAE07B0B947.mlw
sha1: 141641032ffe05144c85af8fc2b2c7d8c1722dba
sha256: 0ac9a62fee3468f5e7af72d95bfc56eb7c4bcc5e05af83333eb6db747e8e80bf
sha512: fedbd6e39d97372b733aa626c7da998e0250d3ab51ceabb7c9f055e832bca773c0f86930a687462aa354085ffe900b4331f1db5cc1fd0436c5888982e36b4a23
ssdeep: 12288:lgKpafhQqX+oBuvD2FvX2YwC6jOIeA0b:lgKBqXBuvq2Y6KIeA0b
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: eapz3AOif.exe
FileVersion: 1.0.0.0
CompanyName: xd6zgxfcr xd6zxe7x131tak
LegalTrademarks: 
Comments: Various shell controls for winforms.
ProductName: FileSystemControls
ProductVersion: 1.0.0.0
FileDescription: FileSystemControls
OriginalFilename: eapz3AOif.exe

MSIL/GenKryptik.FHYS also known as:

Lionic	Trojan.Multi.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Inject4.14680
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.575344
Cylance	Unsafe
Sangfor	Riskware.Win32.Agent.ky
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:Win32/starter.ali1000139
Cybereason	malicious.32ffe0
Cyren	W32/MSIL_Kryptik.EYH.gen!Eldorado
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of MSIL/GenKryptik.FHYS
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Trojan.MSIL.Taskun.gen
BitDefender	Trojan.GenericKD.46684602
MicroWorld-eScan	Trojan.GenericKD.46684602
Ad-Aware	Trojan.GenericKD.46684602
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34050.Dm0@ayOPC8m
McAfee-GW-Edition	BehavesLike.Win32.Fareit.gc
FireEye	Generic.mg.335233464b6ae8c1
Emsisoft	Trojan.GenericKD.46684602 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Generic.D2C859BA
GData	Trojan.GenericKD.46684602
AhnLab-V3	Trojan/Win.Generic.C4567232
McAfee	RDN/AgentTesla
MAX	malware (ai score=85)
Malwarebytes	MachineLearning/Anomalous.96%
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002H07GQ21
Ikarus	Trojan.MSIL.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.ACBN!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Heur.Generic.HwMAueAA

How to remove MSIL/GenKryptik.FHYS?

MSIL/GenKryptik.FHYS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X