Malware

Win32/GenKryptik.BXIY removal instruction

Malware Removal

The Win32/GenKryptik.BXIY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/GenKryptik.BXIY virus can do?

  • Executable code extraction
  • Compression (or decompression)
  • Creates RWX memory
  • Expresses interest in specific running processes
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine Win32/GenKryptik.BXIY?


File Info:

crc32: 736A52AE
md5: f3e7393967ec6f0ff39fffa98ce40659
name: F3E7393967EC6F0FF39FFFA98CE40659.mlw
sha1: 5a4bcd4fd6bcce5994106814d45235c219c89226
sha256: b9e57beb4a007078fce2c542b06117cca706a91cd54bba1a4ddac98ed15d1314
sha512: 1a494e85a274d68f2d503b190b113035b08ec8deaf13e4e38feabc4d1084541598bd33e82c4bf8c1ace64d6bb60c3c3ee1cb08152d9558e373f9b08f49511246
ssdeep: 24576:GNFacAU0zV+h+HmCgaapjvSkEjkmog6i:G4+rdqk
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: (c) Ankama Studio 2014
FileVersion: 3.11.1
CompanyName: Ankama Studio
LegalTrademarks1: All Rights Reserved
LegalTrademarks2: All Rights Reserved
ProductName: Launcher Dofus
ProductVersion: 2.25.1.90112.3
FileDescription: Launcher Dofus
OriginalFilename: Dofus
Translation: 0x0409 0x04e4

Win32/GenKryptik.BXIY also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0053fb461 )
LionicTrojan.Win32.Agent.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Starter.7606
CynetMalicious (score: 100)
ALYacGen:Variant.Ransom.GandCrab.1868
CylanceUnsafe
ZillyaTrojan.Agent.Win32.887967
SangforHacktool.Win32.CeeInject.BDE
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 0053fb461 )
Cybereasonmalicious.967ec6
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/GenKryptik.BXIY
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan.Win32.Agent.qwgixa
BitDefenderGen:Variant.Ransom.GandCrab.1868
NANO-AntivirusTrojan.Win32.Starter.fajrdo
MicroWorld-eScanGen:Variant.Ransom.GandCrab.1868
TencentMalware.Win32.Gencirc.114ce088
Ad-AwareGen:Variant.Ransom.GandCrab.1868
SophosMal/Generic-S
ComodoMalware@#219ie1hk914mh
BitDefenderThetaGen:NN.ZexaF.34796.hv0@aGdtIsmO
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.f3e7393967ec6f0f
EmsisoftGen:Variant.Ransom.GandCrab.1868 (B)
JiangminTrojan.Agent.bgof
AviraHEUR/AGEN.1130800
Antiy-AVLTrojan/Generic.ASMalwS.25C8B16
MicrosoftVirTool:Win32/CeeInject.BDE!bit
GDataGen:Variant.Ransom.GandCrab.1868
AhnLab-V3Malware/Win32.Generic.C2470701
McAfeeArtemis!F3E7393967EC
MAXmalware (ai score=100)
VBA32BScope.Trojan.Agent
PandaTrj/GdSda.A
YandexTrojan.GenAsa!QnQO3wAPU3M
IkarusTrojan.Win32.Krypt
MaxSecureTrojan.Malware.12318495.susgen
FortinetW32/GenKryptik.CKDY!tr.ransom
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.CeeInject.HgAASQ8A

How to remove Win32/GenKryptik.BXIY?

Win32/GenKryptik.BXIY removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment