Win32/GenKryptik.EQUM (file analysis)

The Win32/GenKryptik.EQUM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenKryptik.EQUM virus can do?

• Executable code extraction
• Creates RWX memory
• Mimics the system’s user agent string for its own requests
• Expresses interest in specific running processes
• HTTP traffic contains suspicious features which may be indicative of malware related traffic
• Performs some HTTP requests

How to determine Win32/GenKryptik.EQUM?

File Info:
crc32: 1B885572
md5: d1a07c60bf53c1297b608cc2d2db74d2
name: upload_file
sha1: 24849a2b9b6f598ba8613fe86a807ebbd4654a38
sha256: 3d9d39210723b207bb0b8570dd72026d4568330d63a608e521bdb41904030d81
sha512: c3f94438a40efdbe28dba0b59f3431b7cea2d277f20d26c0d3e36ff399c07a2e9e3d5a7d8595a595abb1964e94f9f7595710075825daead41f4f07510a5c9fa0
ssdeep: 12288:p5q4Q0ti//RlGGxk4AJbXNFJ7701hToszTGG58e5:/q70o/Rljk4AdNL70/D358e5
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2001
InternalName: TestMfc
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: TestMfc Application
ProductVersion: 1, 0, 0, 1
FileDescription: TestMfc MFC Application
OriginalFilename: TestMfc.EXE
Translation: 0x0409 0x04b0

Win32/GenKryptik.EQUM also known as:

How to remove Win32/GenKryptik.EQUM?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.