Malware

How to remove “MSIL/GenKryptik.FODU”?

Malware Removal

The MSIL/GenKryptik.FODU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSIL/GenKryptik.FODU virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine MSIL/GenKryptik.FODU?



File Info:

name: DAA5FBC7355C6586AAF4.mlw
path: /opt/CAPEv2/storage/binaries/d48ba61686bed9bcd76c92cca9e720d9afd6695b4ac2e62b5772af8367fff20f
crc32: 9554A2EA
md5: daa5fbc7355c6586aaf420a8c1b2e989
sha1: c9554309b0266c41bd945f43c74da5139994ef17
sha256: d48ba61686bed9bcd76c92cca9e720d9afd6695b4ac2e62b5772af8367fff20f
sha512: 64ced6fcc04cb810105d7782db0582b4588092499da18787135073cc069f448e6482938006f1e60cac3289febce52e8be085e3e313795772be5cad79582f805c
ssdeep: 12288:Me4rH7Z+BRzw4dCGjv7n8MDdHKKT7STJDf9H:R2H7wu0zDxBKi7GpH
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BDB4E0967864E1F3D23C19B3BE43A04E67A26DF5ED51E2891AC3F24724F27600E605B7
sha3_384: a4c4f0ecbeb8b50ac6878d9751996bde4c32dc43a69c9a1afd7990689d2a4e41e488e473b0de80c2fce98e4dca99b263
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-11-30 01:14:14


Version Info:

Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Epidemic Builder
FileVersion: 1.0.0.0
InternalName: Excepti.exe
LegalCopyright: Copyright ©  2017 - 2021
LegalTrademarks: 
OriginalFilename: Excepti.exe
ProductName: Epidemic Builder
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/GenKryptik.FODU also known as:

LionicTrojan.MSIL.Taskun.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.38143117
FireEyeGeneric.mg.daa5fbc7355c6586
McAfeePWS-FCUF!DAA5FBC7355C
CylanceUnsafe
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:Win32/starter.ali1000139
K7GWTrojan ( 0058b2291 )
K7AntiVirusTrojan ( 0058b2291 )
BitDefenderThetaGen:NN.ZemsilF.34062.Gm0@aC7oDEf
CyrenW32/MSIL_Kryptik.GEZ.gen!Eldorado
SymantecScr.Malcode!gdn30
ESET-NOD32a variant of MSIL/GenKryptik.FODU
TrendMicro-HouseCallTROJ_FRS.0NA103L121
Paloaltogeneric.ml
KasperskyHEUR:Trojan.MSIL.Taskun.gen
BitDefenderTrojan.GenericKD.38143117
AvastWin32:CrypterX-gen [Trj]
TencentMsil.Trojan.Taskun.Wtxd
Ad-AwareTrojan.GenericKD.38143117
EmsisoftTrojan.GenericKD.38143117 (B)
Comodo.UnclassifiedMalware@0
DrWebTrojan.Inject4.21081
TrendMicroTROJ_FRS.0NA103L121
McAfee-GW-EditionBehavesLike.Win32.Generic.hc
SophosMal/Generic-S
APEXMalicious
GDataTrojan.GenericKD.38143117
WebrootW32.Trojan.Gen
AviraTR/Kryptik.optcy
MAXmalware (ai score=100)
KingsoftWin32.Troj.Generic_a.a.(kcloud)
GridinsoftRansom.Win32.Sabsik.sa
MicrosoftTrojan:MSIL/AgentTesla.SSS!MTB
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Sabsik.C4802328
VBA32TScope.Trojan.MSIL
ALYacTrojan.GenericKD.38143117
MalwarebytesTrojan.Tasker
IkarusTrojan.MSIL.Krypt
YandexTrojan.Taskun!s+rr2SoUHzA
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/GenKryptik.FODU!tr
AVGWin32:CrypterX-gen [Trj]
Cybereasonmalicious.9b0266
PandaTrj/GdSda.A

How to remove MSIL/GenKryptik.FODU?

MSIL/GenKryptik.FODU removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment