Categories: Malware

Win32/GenKryptik.AGJO removal guide

The Win32/GenKryptik.AGJO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenKryptik.AGJO virus can do?

Executable code extraction
Creates RWX memory
Drops a binary and executes it
Deletes its original binary from disk
Exhibits behavior characteristic of TrickBot banking trojan
Installs itself for autorun at Windows startup
Creates a copy of itself
Attempts to create a known TrickBot mutex.

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/GenKryptik.AGJO?


File Info:
crc32: 4E675B1Fmd5: de617266f3194a042ae115ed99b3cf97name: DE617266F3194A042AE115ED99B3CF97.mlwsha1: 0c00b4a95b39b3c4837211148055fca05c17a235sha256: 984edc19e8360156fc45d04a3ac3c1fb84b5967b449516ffa65be58c5bcee07dsha512: 5b094edf6f2ef1df058ee1a10606fc2ab4275e15b0d5cfec9f5b4d2af467e4e91bd72b356f53e693b81f51d8c11d872be9cb4610b72d3fcebd4892b685dc0cb9ssdeep: 6144:RRqJU6KgLoRlXazkgwnFfdGM3yevbsznJ92:Rp6vilqzWFP3ybntype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/GenKryptik.AGJO also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Brresmon.Gen.1
FireEye	Generic.mg.de617266f3194a04
Cylance	Unsafe
Sangfor	Malware
CrowdStrike	win/malicious_confidence_90% (D)
BitDefender	Gen:Trojan.Brresmon.Gen.1
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Ad-Aware	Gen:Trojan.Brresmon.Gen.1
Emsisoft	Gen:Trojan.Brresmon.Gen.1 (B)
Invincea	ML/PE-A
McAfee-GW-Edition	BehavesLike.Win32.PUPXBGVB.fh
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Wacatac.C!ml
Arcabit	Trojan.Brresmon.Gen.1
SUPERAntiSpyware	Trojan.Agent/Gen-Kryptik
GData	Gen:Trojan.Brresmon.Gen.1
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Kryptik.C4224652
McAfee	Artemis!DE617266F319
MAX	malware (ai score=81)
VBA32	BScope.Trojan.Downloader
Malwarebytes	Trojan.Dropper
ESET-NOD32	a variant of Win32/GenKryptik.AGJO
Rising	Trojan.GenKryptik!8.AA55 (TFE:5:awmz33IEeDT)
SentinelOne	Static AI – Malicious PE
BitDefenderTheta	AI:Packer.9141D8B21F
AVG	FileRepMalware
Cybereason	malicious.6f3194
Qihoo-360	HEUR/QVM20.1.455B.Malware.Gen