About "Win32/GenKryptik.DZSN" infection

The Win32/GenKryptik.DZSN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenKryptik.DZSN virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Hungarian
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/GenKryptik.DZSN?


File Info:
crc32: FF8EE7E5
md5: 46248d659afbc97eaf5b82af64743c7f
name: 1.exe
sha1: 0b1e11384248bbca55d2d3cc642ae3ce24af68d0
sha256: e0878ef2edfdccfa31a2a800b40bc1f246042a734969e7fb62aea39eabaf8bff
sha512: 7a84cfe3e88391ab1da0efd628cc6f25183a45ea2a504b3c4b80ef82da49d4663201eb682c60d7879e51ff385cd5dbe8dc4768577643ca2c450510870d1c92b5
ssdeep: 12288:qI10I1fsj6ERVSHtsEqVfFJNCPac1DRcT+I34MXRqwh/Wn+h+0lSQbH3vbqc1O:tsLRsth8FkZKb34MXRlq2+0l9T
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x040e 0x04b0
InternalName: GRUCIOLata
FileVersion: 1.00
CompanyName: aSUS
ProductName: KIROEFFect1
ProductVersion: 1.00
OriginalFilename: GRUCIOLata.exe

Win32/GenKryptik.DZSN also known as:

Sangfor	Malware
Cybereason	malicious.84248b
Cyren	W32/Kryptik.ATB.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GenKryptik.DZSN
APEX	Malicious
Paloalto	generic.ml
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Trojan:Win32/GenVBKryptik.ali2000014
Endgame	malicious (moderate confidence)
McAfee-GW-Edition	BehavesLike.Win32.Fareit.th
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.46248d659afbc97e
F-Prot	W32/Kryptik.ATB.gen!Eldorado
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Acronis	suspicious
Malwarebytes	Trojan.MalPack.VB
BitDefenderTheta	Gen:NN.ZevbaF.32519.en0@a0a5wxlG
AVG	FileRepMalware
Avast	FileRepMalware
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	HEUR/QVM03.0.C5FB.Malware.Gen

How to remove Win32/GenKryptik.DZSN?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Win32/GenKryptik.DZSN” infection