Malware

How to remove “MSIL/GenKryptik.FZNO”?

Malware Removal

The MSIL/GenKryptik.FZNO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/GenKryptik.FZNO virus can do?

  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine MSIL/GenKryptik.FZNO?


File Info:

name: BD0E358DFBB46031F5AA.mlw
path: /opt/CAPEv2/storage/binaries/7de9404d6c7e5d66bb3b8431fbde880eedbc5064e50c44ffc5d591f0a47b8ed3
crc32: C223BDE8
md5: bd0e358dfbb46031f5aa0f726b85d834
sha1: 70c45e965e1feeb6ad8f9725a1123cd2514cac23
sha256: 7de9404d6c7e5d66bb3b8431fbde880eedbc5064e50c44ffc5d591f0a47b8ed3
sha512: edb3d627ea2ebff6f2531ae514e0942c9f9fb55992483a15d4eae7434dd5a58c19e766cb3f4fe87a84dfada925ded82162ec6a1360035986c068c99f59418f0b
ssdeep: 24576:Kct1dPw+A694bhBTax6Z5MTeQrqnRpvmd8A:fnf65MThrqnRVm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B7553B9C7650B2AFC817CE36CA645C24FAA0B56A471BE343A05326ED9D0D69FCF111F2
sha3_384: 594169cb97147a563bd1e6ebd83df0ec9606f96dfa01b6afd86da502cf7e322185572c7943fb8115edd1940c7b8d25c3
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-08-31 23:46:25

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName: Manning's
FileDescription: IQ Toolkit
FileVersion: 6.0.0.0
InternalName: uyKr.exe
LegalCopyright: Manning's 2021
LegalTrademarks:
OriginalFilename: uyKr.exe
ProductName: IQ Toolkit
ProductVersion: 6.0.0.0
Assembly Version: 6.0.0.0

MSIL/GenKryptik.FZNO also known as:

BkavW32.AIDetectMalware.CS
AVGWin32:PWSX-gen [Trj]
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.61650548
FireEyeGeneric.mg.bd0e358dfbb46031
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
SkyhighBehavesLike.Win32.Generic.tc
McAfeeArtemis!BD0E358DFBB4
Cylanceunsafe
ZillyaTrojan.GenKryptik.Win32.153103
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 00599a341 )
AlibabaTrojan:Win32/starter.ali1000139
K7GWTrojan ( 00599a341 )
VirITTrojan.Win32.MSIL_Heur.A
Paloaltogeneric.ml
SymantecTrojan Horse
tehtrisGeneric.Malware
ESET-NOD32a variant of MSIL/GenKryptik.FZNO
APEXMalicious
AvastWin32:PWSX-gen [Trj]
ClamAVWin.Dropper.Nanocore-10024531-0
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefenderTrojan.GenericKD.61650548
NANO-AntivirusTrojan.Win32.Agensla.jsbwbw
TencentMalware.Win32.Gencirc.13bea27b
EmsisoftTrojan.GenericKD.61650548 (B)
F-SecureHeuristic.HEUR/AGEN.1309765
DrWebTrojan.PackedNET.1427
VIPRETrojan.GenericKD.61650548
TrendMicroTROJ_GEN.R002C0DDG24
SophosMal/Generic-S
IkarusTrojan.MSIL.Agent
VaristW32/MSIL_Kryptik.HYR.gen!Eldorado
AviraHEUR/AGEN.1309765
Antiy-AVLTrojan/MSIL.GenKryptik
MicrosoftTrojan:MSIL/Tnega.SSS!MTB
XcitiumMalware@#jgrrhpjfhrbg
ArcabitTrojan.Generic.D3ACB674
ViRobotTrojan.Win32.Z.Genkryptik.1360896
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agensla.gen
GDataTrojan.GenericKD.61650548
GoogleDetected
AhnLab-V3Trojan/Win.Generic.R519774
BitDefenderThetaGen:NN.ZemsilF.36804.tn0@aGQqIWg
ALYacSpyware.AgentTesla
VBA32CIL.HeapOverride.Heur
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/RnkBend.A
TrendMicro-HouseCallTROJ_GEN.R002C0DDG24
RisingMalware.Obfus/MSIL@AI.100 (RDM.MSIL2:PRQ2kt0TWduSH4CRoa+IFA)
YandexTrojan.Igent.bYDUBe.1
MAXmalware (ai score=100)
MaxSecureTrojan.Malware.74499699.susgen
FortinetMSIL/GenKryptik.FYYU!tr
DeepInstinctMALICIOUS
alibabacloudTrojan

How to remove MSIL/GenKryptik.FZNO?

MSIL/GenKryptik.FZNO removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment