Categories: Malware

Win32/GenKryptik.ETTT removal tips

The Win32/GenKryptik.ETTT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenKryptik.ETTT virus can do?

Executable code extraction
Creates RWX memory
Attempts to connect to a dead IP:Port (7 unique times)
At least one IP Address, Domain, or File Name was found in a crypto call
Performs some HTTP requests
Attempts to create or modify system certificates

Related domains:

z.whorecord.xyz

a.tomx.xyz

support.apple.com

support.oracle.com

help.twitter.com

www.intel.com

loadmercedes.beer

How to determine Win32/GenKryptik.ETTT?


File Info:
crc32: 4833FAEBmd5: e56934ba1deb67aed02c8b51fe56a0d7name: upload_filesha1: 44d4416cb37e53dfff0c8e7e587080e4555132aasha256: e333ee8df8edc262e5fe1c6c8bb448da22870204b2cbfff8a663571ca5cc4f0esha512: a8a79e548073eca16c4744529e113c7a873f8a95b4965ea72915e267f6f40975bc3d69858d37a1dafc92f5b8fe78726f0d4757261b053c03255791c6daa2d247ssdeep: 6144:KjP/6SUwpx7imGaDjuzCVEunJMXwDHhQbAO9h08fC2j:KTzrTimGaDylunJMqqb/nfhtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/GenKryptik.ETTT also known as:

Bkav	W32.AIDetectVM.malware2
MicroWorld-eScan	Trojan.GenericKD.34709470
ALYac	Trojan.IcedID.gen
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Generic.4!c
BitDefender	Trojan.GenericKD.34709470
K7GW	Trojan ( 00570a601 )
K7AntiVirus	Trojan ( 00570a601 )
TrendMicro	TROJ_GEN.R03BC0DJA20
Symantec	Ransom.Wannacry
ESET-NOD32	a variant of Win32/GenKryptik.ETTT
TrendMicro-HouseCall	TROJ_GEN.R03BC0DJA20
Avast	Win32:TrojanX-gen [Trj]
Alibaba	Trojan:Win32/IcedID.3f55e336
ViRobot	Trojan.Win32.Z.Icedid.294400
APEX	Malicious
Ad-Aware	Trojan.GenericKD.34709470
Emsisoft	Trojan.GenericKD.34709470 (B)
Comodo	Malware@#1vlekcrv0hw23
F-Secure	Trojan.TR/AD.PhotoDlder.ylarw
DrWeb	Trojan.IcedID.30
Invincea	Mal/Generic-S
McAfee-GW-Edition	Artemis!Trojan
FireEye	Trojan.GenericKD.34709470
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Krypt
Jiangmin	Trojan.Banker.IcedID.oo
Avira	TR/AD.PhotoDlder.ylarw
MAX	malware (ai score=87)
Antiy-AVL	Trojan/Win32.GenKryptik
Microsoft	Trojan:Win32/IcedID.RS!MTB
Arcabit	Trojan.Generic.D2119FDE
GData	Trojan.GenericKD.34709470
Cynet	Malicious (score: 85)
McAfee	GenericRXAA-AA!E56934BA1DEB
VBA32	BScope.Trojan.Yakes
Malwarebytes	Trojan.Downloader
Panda	Trj/GdSda.A
Rising	Trojan.GenKryptik!8.AA55 (TFE:5:JFIL7d2R9RT)
Fortinet	W32/GenKryptik.ETTE!tr
AVG	Win32:TrojanX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Generic/Trojan.7d0