MSIL/GenKryptik.FKKU removal instruction

The MSIL/GenKryptik.FKKU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/GenKryptik.FKKU virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine MSIL/GenKryptik.FKKU?


File Info:
crc32: F8B89B4A
md5: a4494c3221aa667b0ac468c0ab0533fc
name: A4494C3221AA667B0AC468C0AB0533FC.mlw
sha1: 4e034966f6849386afecc5fc6049005515d72ed1
sha256: c9243b55887e704e918c02ed16db3200dfa9bde648dc8ccb04f65d08f95966a0
sha512: 98fc2ef9506c965acd05cd14e418d8601fea6a063da948b84acac8e1cf069c90beb59dc9dc2e168d770440980aa67d1ac41a90cd36eca9e6fda6eb7872c74ba6
ssdeep: 12288:ZFk4DbF53e0IUFLgDMqPbhaiYapGlPwtoHhhLhVMci4R0gOXY:ZdgMmbNclItoBhL0ci4R0e
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2012
Assembly Version: 1.0.0.0
InternalName: SessionMa.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: AccountManager
ProductVersion: 1.0.0.0
FileDescription: AccountManager
OriginalFilename: SessionMa.exe

MSIL/GenKryptik.FKKU also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Barys.5541
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (D)
Cybereason	malicious.221aa6
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/GenKryptik.FKKU
APEX	Malicious
Avast	FileRepMalware
Kaspersky	UDS:Trojan.MSIL.Taskun.gen
BitDefender	Gen:Variant.Barys.5541
MicroWorld-eScan	Gen:Variant.Barys.5541
Ad-Aware	Gen:Variant.Barys.5541
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZemsilF.34142.Dm0@auut5y
FireEye	Generic.mg.a4494c3221aa667b
Emsisoft	Gen:Variant.Barys.5541 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Arcabit	Trojan.Barys.D15A5
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Variant.Barys.5541
AhnLab-V3	Trojan/Win32.Injector.C4097812
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.2274572920
Ikarus	Trojan-Spy.Keylogger.Snake
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.ZXG!tr
AVG	FileRepMalware
Paloalto	generic.ml

How to remove MSIL/GenKryptik.FKKU?

MSIL/GenKryptik.FKKU removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X