About “Win32/GenKryptik.EQFI” infection

The Win32/GenKryptik.EQFI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenKryptik.EQFI virus can do?

• Executable code extraction
• Injection (inter-process)
• Injection (Process Hollowing)
• Creates RWX memory
• The binary likely contains encrypted or compressed data.
• Executed a process and injected code into it, probably while unpacking
• Network activity detected but not expressed in API logs
• Anomalous binary characteristics

How to determine Win32/GenKryptik.EQFI?

File Info:
crc32: 16869548
md5: 97058b5b713fce6d98933758debac2bd
name: WB 20200813020804.exe
sha1: aa1ef1ee348186489d9b6fc825d02aea5bc2abe8
sha256: bcc8c0f61a1dfdfd76ebe02523c3eef4362cb7fb3413b24a7632a2262219a589
sha512: 842c4aa42314c28e9400ab1efc4c7ce22e48e1144dc0885b54908f38520b30e946fdadd8f3c9c7bf79fa48dc47ac6c6e1d4f8dca2f254c240c9d3267ca55f7ea
ssdeep: 12288:dmp9XVk3rNq8srw+ZdKSsWItO8n+D0s+rIJ3dCN/jrc/nWSAELwM0tH0SyRpMx:KlQNqHMWKKcAFrJt2j4/nWxSwbGSycx
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/GenKryptik.EQFI also known as:

How to remove Win32/GenKryptik.EQFI?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.