TrojanSpy:MSIL/Flunuceo.A removal instruction

The TrojanSpy:MSIL/Flunuceo.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What TrojanSpy:MSIL/Flunuceo.A virus can do?

Network activity detected but not expressed in API logs

How to determine TrojanSpy:MSIL/Flunuceo.A?


File Info:
crc32: 01717F13
md5: d72fff7a4de81c7dad9de078360aeff2
name: D72FFF7A4DE81C7DAD9DE078360AEFF2.mlw
sha1: bb07d861496764dc444e28d20784397d76d4fa7d
sha256: 102ac849907fd92d26457d45922601414947084c5ee3646440516dd0d1941789
sha512: 85cb543d087553a3d88a6f5b125f60acc8b4c0219ef23c57ce02b1f745bc1c26c61b11dc32f2e407b746a7435a91a1acb230a1f0631d336566fc3a433e1b27e7
ssdeep: 768:OeViawxNHWuGd4L0eJtyVVbGwQQ+EW8cAdDG1B7cKzVI:fHA0S4bGwQQ+Ey6DGngKzi
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Microsoft 2011
Assembly Version: 1.0.0.0
InternalName: flu-nucleo.exe
FileVersion: 1.0.0.0
CompanyName: Microsoft
LegalTrademarks: 
Comments: 
ProductName: flu
ProductVersion: 1.0.0.0
FileDescription: flu
OriginalFilename: flu-nucleo.exe

TrojanSpy:MSIL/Flunuceo.A also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader26.63627
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.MSILPerseus.63859
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Ransom:MSIL/Blocker.52c5b6ea
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.a4de81
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Spy.Agent.WL
Avast	Win32:GenMaliciousA-CNT [Trj]
Kaspersky	Trojan-Ransom.Win32.Blocker.leil
BitDefender	Gen:Variant.MSILPerseus.63859
NANO-Antivirus	Trojan.Win32.Blocker.fhyeky
MicroWorld-eScan	Gen:Variant.MSILPerseus.63859
Tencent	Win32.Trojan.Blocker.Wptf
Ad-Aware	Gen:Variant.MSILPerseus.63859
Sophos	Mal/Generic-R + Mal/MSIL-BM
Comodo	Malware@#3p7kzcbt0dwq
BitDefenderTheta	Gen:NN.ZemsilF.34692.bm1@aaiEIap
McAfee-GW-Edition	Artemis
FireEye	Generic.mg.d72fff7a4de81c7d
Emsisoft	Gen:Variant.MSILPerseus.63859 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Spy.Gen
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.27D1086
Microsoft	TrojanSpy:MSIL/Flunuceo.A
AegisLab	Trojan.Win32.Generic.4!c
GData	Gen:Variant.MSILPerseus.63859
McAfee	Artemis!D72FFF7A4DE8
MAX	malware (ai score=99)
Panda	Trj/GdSda.A
Rising	Spyware.Agent!8.C6 (TFE:D:galI53yOD0S)
Yandex	Trojan.Blocker!lrXim7UZc6g
Ikarus	Trojan.MSIL.Spy
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Generic.AP.1E1BE4!tr
AVG	Win32:GenMaliciousA-CNT [Trj]
Paloalto	generic.ml

How to remove TrojanSpy:MSIL/Flunuceo.A?

TrojanSpy:MSIL/Flunuceo.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X