Win32/GenKryptik.CGUI (file analysis)

The Win32/GenKryptik.CGUI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenKryptik.CGUI virus can do?

Executable code extraction
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Collects information to fingerprint the system

Related domains:

admin.svapofit.com

survey-smiles.com

ww1.survey-smiles.com

How to determine Win32/GenKryptik.CGUI?


File Info:
crc32: 07F8F46F
md5: 73bd76f0549cc1992d943ddfd92a9c4d
name: 73BD76F0549CC1992D943DDFD92A9C4D.mlw
sha1: 802e70b76c7c0860b3a4a257b1bc96fc3430ff01
sha256: 2f530a45e4acf58d16dad1b1e23b5b1419ba893c2f76f6625da3acb86933462f
sha512: 4a524d1a552eb6d101f9ceb25c7dc608669eeca7dc99bc5ddc2b9d7d3c8f4ffd3cd8f12c3328b07d80888d6758aff970b3e6898f88c3451a058224b83007e521
ssdeep: 3072:ayzKqAOparE8YPbtMrxH5C000IS7IrfAgneF9RUQo6qHqn/PNAyv:nefOUGPbtMru00JD09RUQzqHOXN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Blood Accepting Center Donate
FileVersion: 6.4.0.0             
CompanyName: Blood Accepting Center Donate
Comments: Blood Accepting Center Donate
ProductName: Blood Accepting Center Donate
ProductVersion: 6.4.0.0             
FileDescription: Blood Accepting Center Donate
Translation: 0x0000 0x04b0

Win32/GenKryptik.CGUI also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0053a9f01 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.24300
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Babar.22696
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
Alibaba	Trojan:Application/GenKryptik.aff882ed
K7GW	Trojan ( 0053a9f01 )
Cybereason	malicious.0549cc
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GenKryptik.CGUI
APEX	Malicious
Avast	FileRepMalware
Kaspersky	Trojan-PSW.Win32.Coins.aayc
BitDefender	Gen:Variant.Babar.22696
NANO-Antivirus	Trojan.Win32.Stealer.fhsydk
MicroWorld-eScan	Gen:Variant.Babar.22696
Tencent	Malware.Win32.Gencirc.114d4efc
Ad-Aware	Gen:Variant.Babar.22696
BitDefenderTheta	Gen:NN.ZexaF.34170.mm0@a8y9xQe
FireEye	Generic.mg.73bd76f0549cc199
Emsisoft	Gen:Variant.Babar.22696 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1125422
eGambit	Unsafe.AI_Score_89%
Antiy-AVL	Trojan/Generic.ASMalwS.27237FC
Microsoft	Trojan:Win32/Tiggre!rfn
GData	Gen:Variant.Babar.22696
AhnLab-V3	Trojan/Win32.Ngrbot.C2639063
Acronis	suspicious
McAfee	Artemis!73BD76F0549C
MAX	malware (ai score=100)
VBA32	TrojanRansom.Blocker
Malwarebytes	Malware.AI.723658459
Panda	Trj/GdSda.A
Rising	Trojan.Generic@ML.93 (RDML:PjAxtlq9brWkrqScxqAOWQ)
Yandex	Trojan.GenAsa!DI5FSNkmNKQ
Ikarus	Trojan-Ransom.StopCrypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/GenKryptik.CGKA!tr
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Win32/GenKryptik.CGUI?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/GenKryptik.CGUI (file analysis)