Categories: Malware

Win32/GenKryptik.ERLQ removal

The Win32/GenKryptik.ERLQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenKryptik.ERLQ virus can do?

Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Executed a process and injected code into it, probably while unpacking
Network activity contains more than one unique useragent.
Attempts to modify proxy settings
Anomalous binary characteristics

How to determine Win32/GenKryptik.ERLQ?


File Info:
crc32: 9E833DF5md5: a505f083f07f702b869cdd0d499884b7name: A505F083F07F702B869CDD0D499884B7.mlwsha1: 0ebec0bac3fa97928904c82e0c7e4ff8a4bcc24fsha256: 91882c7d9b8979e29c56fd9b3b76b84cbc5347bd3da19eb9044e7d13c1ac071dsha512: 214c011ad6b9c8acf083ec41883c38929721699d67325e2ed690c09fc7917e89ef03eb30c1aadb555b46145b75555ea31f46ca5da3cbed52a5610bf54baa8ac4ssdeep: 12288:WVd11fheE9zHDefVEmRnG2BaVfqMVfV2wNUGUJdf+xnxsxPxQymAXVE:WbVHDefVEenG2afqMVfV26UGUJdfG4Etype: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
Version Info:
LegalCopyright: xa9 Quick Heal Technologies Ltd. All rights reserved.InternalName: onlinent.exeFileVersion: 11.1.0.11CompanyName: Quick Heal Technologies Ltd.ProductName: Quick Heal AntiVirusProductVersion: 18.00FileDescription: Online ProtectionOriginalFilename: onlinent.exeTranslation: 0x0409 0x04b0

Win32/GenKryptik.ERLQ also known as:

K7AntiVirus	Trojan ( 0009162c1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Spy.18178
Cynet	Malicious (score: 85)
ALYac	Gen:Variant.Bulz.59362
Cylance	Unsafe
Zillya	Dropper.NetTraveler.Win32.4
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	TrojanDownloader:Win32/NetTraveler.df96f08c
K7GW	Trojan ( 0009162c1 )
Cybereason	malicious.ac3fa9
TrendMicro	TROJ_GEN.R002C0DHO20
Symantec	Trojan.Travnet
ESET-NOD32	a variant of Win32/GenKryptik.ERLQ
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Kaspersky	Trojan-Dropper.Win32.NetTraveler.u
BitDefender	Gen:Variant.Bulz.59362
MicroWorld-eScan	Gen:Variant.Bulz.59362
Tencent	Win32.Trojan-dropper.Nettraveler.Ljjp
Ad-Aware	Gen:Variant.Bulz.59362
Comodo	.UnclassifiedMalware@0
F-Secure	Trojan.TR/Agent.ujhie
BitDefenderTheta	Gen:NN.ZexaF.34196.@K0@auKxoSf
VIPRE	Trojan.Win32.Generic!BT
FireEye	Generic.mg.a505f083f07f702b
Sophos	Mal/Generic-S
Webroot	W32.Trojan.Travnet
Avira	TR/Agent.ujhie
Antiy-AVL	Trojan[Dropper]/Win32.NetTraveler
Microsoft	TrojanDownloader:Win32/Travnet.B
Arcabit	Trojan.Bulz.DE7E2
AegisLab	Trojan.Win32.Bulz.4!c
ZoneAlarm	Trojan-Dropper.Win32.NetTraveler.u
GData	Gen:Variant.Bulz.59362
McAfee	Artemis!A505F083F07F
MAX	malware (ai score=88)
VBA32	Backdoor.Spy
Malwarebytes	Backdoor.Bot
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DHO20
Rising	Downloader.TravNet!8.D97A (TFE:5:SkmslYmEhBK)
Ikarus	Trojan.Win32.Agent
Fortinet	W32/Agent.PIL!tr
AVG	Win32:TrojanX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Dropper.851