Malware

Generic.Cryptor.X.01971159 removal guide

Malware Removal

The Generic.Cryptor.X.01971159 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Cryptor.X.01971159 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Generic.Cryptor.X.01971159?


File Info:

crc32: F5C6E9F5
md5: ada9f3fef02806076da84b549a873261
name: ADA9F3FEF02806076DA84B549A873261.mlw
sha1: 1a215556d81e885d9b179dc46d037742d047b72b
sha256: dedfb7f92808e48feb04d401fdd7cac5f4951c1e6b31601f1b901f894d29398d
sha512: e664dfe09736bb22606b990493d8066caacc8727401a2c03f350a3044e86615b2609ffc41e16ee8da0f8f103a03cc57bcb74127f1441580f5a97c683cca419e2
ssdeep: 6144:A0fSeECNROmftNgyBxJy97rmvFZJf1VcrWRY5Jo2CSExtzva9Yua6:FKeElmngyBxq7KvFffUrWR8KxE9Y0
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Cryptor.X.01971159 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusRiskware ( 0040eff71 )
LionicTrojan.Win32.Noon.l!c
DrWebTrojan.Inject4.15036
CynetMalicious (score: 100)
ALYacGeneric.Cryptor.X.01971159
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (W)
AlibabaTrojanSpy:Win32/Kryptik.63eda13b
K7GWRiskware ( 0040eff71 )
CyrenW32/Injector.AKA.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Formbook.AA
APEXMalicious
AvastWin32:PWSX-gen [Trj]
ClamAVWin.Packed.E4cb5de-9883743-0
KasperskyHEUR:Trojan-Spy.Win32.Noon.gen
BitDefenderGeneric.Cryptor.X.01971159
MicroWorld-eScanGeneric.Cryptor.X.01971159
Ad-AwareGeneric.Cryptor.X.01971159
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34058.suZ@au5fexpi
TrendMicroTrojanSpy.Win32.SWOTTER.USMANH321
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
FireEyeGeneric.mg.ada9f3fef0280607
EmsisoftTrojan.Crypt (A)
SentinelOneStatic AI – Malicious PE
AviraTR/AD.Swotter.gixwt
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Tnega.VAM!MTB
ArcabitGeneric.Cryptor.X.D1E13D7
ZoneAlarmHEUR:Trojan-Spy.Win32.Noon.gen
GDataGeneric.Cryptor.X.01971159
AhnLab-V3Malware/Win.Cryptor.R435568
McAfeeRDN/Generic.hbg
MAXmalware (ai score=87)
VBA32BScope.Trojan-Dropper.Injector
MalwarebytesSpyware.PasswordStealer.Generic
PandaTrj/Genetic.gen
TrendMicro-HouseCallTrojanSpy.Win32.SWOTTER.USMANH321
RisingTrojan.Kryptik!1.D84E (CLASSIC)
YandexTrojan.Kryptik!NHXTRqmpD9o
IkarusTrojan.Crypter
FortinetW32/GenKryptik.FIIH!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Cryptor.HwoCueAA

How to remove Generic.Cryptor.X.01971159?

Generic.Cryptor.X.01971159 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment