Malware

MSIL/GenKryptik.FOJY removal instruction

Malware Removal

The MSIL/GenKryptik.FOJY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSIL/GenKryptik.FOJY virus can do?

  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Binary compilation timestomping detected

How to determine MSIL/GenKryptik.FOJY?



File Info:

name: 4DC2A2A4F71EDEC37101.mlw
path: /opt/CAPEv2/storage/binaries/430f4dff00621110e2f9e629f7ebaef834ee71318f19a6bc83ccbcf1bf05c75a
crc32: 7CCE94A9
md5: 4dc2a2a4f71edec37101307b311ef0a1
sha1: d7cb4d6159e5cb3f9c9a452cf0baf549cf73e628
sha256: 430f4dff00621110e2f9e629f7ebaef834ee71318f19a6bc83ccbcf1bf05c75a
sha512: 4fa9d402331da510d9a79d9211aacc7399e466cf631e4a6b2336d30bd4bccca233d7bced5774314a68183d3ed9ba98b9207225fe8e2740770385481bb8022c8d
ssdeep: 6144:WEulPebsD8Ox0+QTErSYwU0nAqpYXbeh0Q4/I9XcVtr/Ap0lud4ys4PBeBYn9ecj:3+Nn
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T1C4548B3D589D6A304B72E2BFB684A41AF68089A337168D2B51C357D14E2F9037FCAD1D
sha3_384: f1d2ec8a2973a89c0751f2903aadd03c453ee083f7d42d53798014b963691b2672376aadb549b95b6d8b67cb1196e9d0
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2048-02-12 14:13:23


Version Info:

Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: assassssa
FileVersion: 1.0.0.0
InternalName: assassssa.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: assassssa.exe
ProductName: assassssa
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/GenKryptik.FOJY also known as:

LionicTrojan.MSIL.Crysan.m!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.38136596
FireEyeGeneric.mg.4dc2a2a4f71edec3
CAT-QuickHealBackdoor.MSIL
McAfeeArtemis!4DC2A2A4F71E
ZillyaTrojan.GenKryptik.Win32.112184
K7AntiVirusTrojan ( 0058b04d1 )
BitDefenderTrojan.GenericKD.38136596
K7GWTrojan ( 0058b04d1 )
Cybereasonmalicious.159e5c
ArcabitTrojan.Generic.D245EB14
CyrenW64/MSIL_Kryptik.GFA.gen!Eldorado
ESET-NOD32a variant of MSIL/GenKryptik.FOJY
TrendMicro-HouseCallTROJ_GEN.R002C0WL221
Paloaltogeneric.ml
KasperskyHEUR:Backdoor.MSIL.Crysan.gen
AlibabaBackdoor:MSIL/Crysan.af188959
Ad-AwareTrojan.GenericKD.38136596
EmsisoftTrojan.GenericKD.38136596 (B)
DrWebBackDoor.Bladabindi.15771
TrendMicroTROJ_GEN.R002C0WL221
McAfee-GW-EditionArtemis!Trojan
SentinelOneStatic AI – Malicious PE
SophosMal/Generic-S
APEXMalicious
AviraTR/Kryptik.whrfe
MAXmalware (ai score=84)
MicrosoftBackdoor:MSIL/Bladabindi.B
GDataMSIL.Backdoor.Bladabindi.H0EDTQ
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.C4801886
ALYacTrojan.GenericKD.38136596
VBA32Backdoor.MSIL.Crysan
MalwarebytesMalware.AI.4157291337
TencentMalware.Win32.Gencirc.11da4444
IkarusTrojan.MSIL.Krypt
MaxSecureTrojan.Malware.74418669.susgen
FortinetMSIL/GenKryptik.FOCV!tr
AVGWin64:CrypterX-gen [Trj]
AvastWin64:CrypterX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove MSIL/GenKryptik.FOJY?

MSIL/GenKryptik.FOJY removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment