Win32/GenKryptik.ETRL malicious file

The Win32/GenKryptik.ETRL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/GenKryptik.ETRL virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/GenKryptik.ETRL?


File Info:
crc32: 2BBB102A
md5: 3b03932d4f4e77d890db09a3da309bad
name: upload_file
sha1: 81d93a24390e91f6d0196b9177ceaaa21cbb2555
sha256: 13505df434d68606d795543450bbbf96b02e5ae457386269fa47dd468cd32963
sha512: d397abe652c240ea0aa300fd66cd6b947d009a1aa472cff56b7bf4db41bcd90362ac1fd358f6e8a44b1fcf18519cbcf84f33b0907a11220b3200d508f0edc9cb
ssdeep: 6144:soPMXLGnQE9NphY64U/jMIuxF8RrnFnknZn3nRmn/nlnenvnxnGn5nPYnhnpanPv:ZPMbGnLphKeMIuxKR0Sn
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2016
InternalName: 360realpro.exe
FileVersion: 8,8,0,1000
OriginalFilename: 360realpro.exe
ProductVersion: 8,8,0,1000
Translation: 0x0409 0x04b0

Win32/GenKryptik.ETRL also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
FireEye	Generic.mg.3b03932d4f4e77d8
Cylance	Unsafe
Sangfor	Malware
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Gen:Variant.Razy.766145
K7GW	Spyware ( 0040f0131 )
K7AntiVirus	Spyware ( 0040f0131 )
Symantec	Packed.Generic.459
Kaspersky	Trojan-Downloader.Win32.Zload.tr
Invincea	ML/PE-A
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Variant.Razy.766145 (B)
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	GrayWare/Win32.Kryptik.ehls
Microsoft	Trojan:Win32/Wacatac.C!ml
ZoneAlarm	Trojan-Downloader.Win32.Zload.tr
GData	Win32.Trojan-Downloader.ZLoader.YMTYXZ
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	GenericRXAA-AA!3B03932D4F4E
VBA32	BScope.Trojan.Diple
ESET-NOD32	a variant of Win32/GenKryptik.ETRL
Ikarus	Win32.Outbreak
BitDefenderTheta	Gen:NN.ZedlaF.34282.Ay9@aOiWR4fi
AVG	FileRepMalware

How to remove Win32/GenKryptik.ETRL?

Win32/GenKryptik.ETRL removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X