How to remove “Win32/GenKryptik.EDHZ”?

The Win32/GenKryptik.EDHZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/GenKryptik.EDHZ virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/GenKryptik.EDHZ?


File Info:
crc32: 028C0F5D
md5: d873dd75b01c27c2dbaaf43ceb7a421b
name: nsdfxcxcgffd.exe
sha1: 9954f575c6f952b3089bddfdd09c689ea78eff7c
sha256: 25917b3be346cc0971b425bbdae93f37e2910750ecc4576e5f8e03fe1d8aee81
sha512: 818598b74a443153174a4096d72921804712a4e2019745afe10e73685c2f5d778f745eed54d629176e57d019dbaaa9d2607eb1a9713bd32b8c69e8f08e69086f
ssdeep: 1536:bxGvraZna45Fw16QmXBe11kvraZna45F:hnnk6Cnn
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: Antiquaria7
FileVersion: 1.00
CompanyName: Bronconong7
Comments: boligfore
ProductName: BLETIAAR
ProductVersion: 1.00
OriginalFilename: Antiquaria7.exe

Win32/GenKryptik.EDHZ also known as:

MicroWorld-eScan	Trojan.GenericKD.42318478
FireEye	Trojan.GenericKD.42318478
ALYac	Trojan.GenericKD.42318478
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
BitDefender	Trojan.GenericKD.42318478
K7GW	Trojan ( 0055fc941 )
BitDefenderTheta	Gen:NN.ZevbaCO.34084.em0@a8ENyOli
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GenKryptik.EDHZ
Paloalto	generic.ml
GData	Trojan.GenericKD.42318478
Kaspersky	Trojan.Win32.Vebzenpak.bax
Ad-Aware	Trojan.GenericKD.42318478
DrWeb	Trojan.DownLoader32.55883
McAfee-GW-Edition	BehavesLike.Win32.Emotet.lm
Trapmine	malicious.moderate.ml.score
Emsisoft	Trojan.GenericKD.42318478 (B)
APEX	Malicious
MAX	malware (ai score=82)
Arcabit	Trojan.Generic.D285BA8E
AhnLab-V3	Trojan/Win32.VBKrypt.R325292
ZoneAlarm	Trojan.Win32.Vebzenpak.bax
Microsoft	Trojan:Win32/Wacatac.C!ml
SentinelOne	DFI – Suspicious PE
McAfee	Artemis!D873DD75B01C
Ikarus	Trojan.Win32.Krypt
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/GenKryptik.EDHZ!tr
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen

How to remove Win32/GenKryptik.EDHZ?

Win32/GenKryptik.EDHZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X