Malware

MSIL/GenKryptik.FKPY removal tips

Malware Removal

The MSIL/GenKryptik.FKPY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/GenKryptik.FKPY virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • Creates a hidden or system file
  • Creates a copy of itself

How to determine MSIL/GenKryptik.FKPY?


File Info:

crc32: 99690B38
md5: f93324854461139c58e0e865ceb3c859
name: F93324854461139C58E0E865CEB3C859.mlw
sha1: 3deeda7cea856d0d45ee83aeb23e000101623c32
sha256: aaac6d698326e6fbbcd64057fbf591ef97bf143494ede008d41ab75e5a37db5a
sha512: 0330d46fb8f872d5b52e94ddf859f0458b6e97e4a40e37c67ebf39b9846b3a0d199329dc591579f7e2c26a89df3f998a34b5bd0de0dced0a45f5454333ec0e90
ssdeep: 12288:IuhWHCM2K4CoI/yzQs2TWIlI40xXO5HYC3Z6ZmrlTKzvNWhrPSfav1VMxelDI:IuD3C1oIlI5Y5Hl3Z60ezvNWhrPSfav
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2008 - 2010
Assembly Version: 1.3.0.0
InternalName: UnmanagedMemoryStre.exe
FileVersion: 1.3.0.0
CompanyName: WHC xae
LegalTrademarks:
Comments: A little Tool where you can check the stats of your RYL - Risk Your Life - characters. Ruins of War version.
ProductName: RYL Character Tool - RoW EU version
ProductVersion: 1.3.0.0
FileDescription: RYL Character Tool - RoW EU version
OriginalFilename: UnmanagedMemoryStre.exe

MSIL/GenKryptik.FKPY also known as:

Elasticmalicious (high confidence)
CylanceUnsafe
CrowdStrikewin/malicious_confidence_60% (D)
Cybereasonmalicious.cea856
SymantecScr.Malcode!gdn30
ESET-NOD32a variant of MSIL/GenKryptik.FKPY
APEXMalicious
CynetMalicious (score: 100)
KasperskyUDS:Trojan.MSIL.Taskun.gen
SophosMal/Generic-R
McAfee-GW-EditionBehavesLike.Win32.Generic.jc
SentinelOneStatic AI – Malicious PE
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:MSIL/SnakeKeylogger.EN!MTB
ZoneAlarmUDS:DangerousObject.Multi.Generic
McAfeeArtemis!F93324854461
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/GenKryptik.BJUV!tr

How to remove MSIL/GenKryptik.FKPY?

MSIL/GenKryptik.FKPY removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment