Win32/GenKryptik.ECMA removal instruction

The Win32/GenKryptik.ECMA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenKryptik.ECMA virus can do?

Creates RWX memory
At least one IP Address, Domain, or File Name was found in a crypto call
A process attempted to delay the analysis task by a long amount of time.
Attempts to repeatedly call a single API many times in order to delay analysis time

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/GenKryptik.ECMA?


File Info:
crc32: 08D67ABC
md5: 983fe5749a378019a957488374b34bb3
name: t34n66nz02423945.exe
sha1: ed149df6735a3e91937bdddeb3dc6de995d4a8d7
sha256: 646826e9caca5b38b7e3eb1403225013fe3fe25bd272f28992aa3b2cb4e38354
sha512: 68f6da11e3bbb99ce4615c49fe060827c00d3052fbd4cb8aa2f87a91f9ad7c932d7c2c350e064ae18a6878e2dad0c3ff9bc98f508cfd265b309b7488f9b4692b
ssdeep: 3072:bv/QI+ODV59OQPbQOIOVvZJnbQHWh4+IL0yQvVlSNheTXmnYYwGQycCOdKwF4x9:jz559XPbISnbyWh4Vpgy7eCnYlABx9
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright 2003
InternalName: ATLUtils
FileVersion: 1, 0, 0, 1
CompanyName: 
ProductName: ATLUtils Module
OLESelfRegister: 
ProductVersion: 1, 0, 0, 1
FileDescription: ATLUtils Module
OriginalFilename: ATLUtils.EXE
Translation: 0x0409 0x04b0

Win32/GenKryptik.ECMA also known as:

FireEye	Generic.mg.983fe5749a378019
McAfee	GenericRXAA-AA!983FE5749A37
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Trojan.GenericKDZ.62238
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
TrendMicro	TrojanSpy.Win32.EMOTET.SMD6.hp
F-Prot	W32/Emotet.ANL
APEX	Malicious
Paloalto	generic.ml
GData	Trojan.GenericKDZ.62238
Kaspersky	HEUR:Trojan-Banker.Win32.Emotet.gen
NANO-Antivirus	Virus.Win32.Gen.ccmw
ViRobot	Trojan.Win32.Emotet.254390
AegisLab	Trojan.Win32.Generic.4!c
Rising	Trojan.GenKryptik!8.AA55 (CLOUD)
Endgame	malicious (high confidence)
F-Secure	Trojan.TR/AD.Emotet.zbqpv
DrWeb	Trojan.DownLoader32.51441
McAfee-GW-Edition	Artemis!Trojan
Trapmine	malicious.moderate.ml.score
Emsisoft	Trojan.GenericKDZ.62238 (B)
Cyren	W32/Emotet.JKLM-1675
Avira	TR/AD.Emotet.zbqpv
MAX	malware (ai score=81)
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	Trojan:Win32/Emotet!ibt
AhnLab-V3	Trojan/Win32.Emotet.C3931935
Ad-Aware	Trojan.GenericKDZ.62238
Malwarebytes	Trojan.Emotet
ESET-NOD32	a variant of Win32/GenKryptik.ECMA
TrendMicro-HouseCall	TrojanSpy.Win32.EMOTET.SMD6.hp
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_84%
Fortinet	W32/GenKryptik.ECMA!tr
Webroot	W32.Trojan.Emotet
Panda	Trj/Emotet.D

How to remove Win32/GenKryptik.ECMA?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/GenKryptik.ECMA removal instruction