Malware

Should I remove “Win32/GenKryptik.EURT”?

Malware Removal

The Win32/GenKryptik.EURT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/GenKryptik.EURT virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • A process attempted to delay the analysis task.
  • A named pipe was used for inter-process communication
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

How to determine Win32/GenKryptik.EURT?


File Info:

crc32: DFBC9161
md5: f5c4a10737115b2c88e467f906084bec
name: crun20.gif
sha1: cfada167527c9047b9db8d15c37af333fa66fd31
sha256: b4f3fda2eaa587a4afa2dfc882b07c46cc3c79b350aef7e57dab0fb31f7b7fd9
sha512: 77e6d565a899cb36df86a5ea9e78b0425f3f1571cbe7006c076e500e4cd651167702e963d7160edb1623e80bb1b037015444668fe3208c8f0adf78feebbda611
ssdeep: 6144:AXfc7Dv1eK98DlbZ0LiHlymkJofZclWsr7RYWxi/1:Ak7DNeK9y8LiFyVlWsrdZxid
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/GenKryptik.EURT also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Heur.Mint.SP.Azorult.1
McAfeeArtemis!F5C4A1073711
CylanceUnsafe
SangforMalware
BitDefenderGen:Heur.Mint.SP.Azorult.1
CrowdStrikewin/malicious_confidence_80% (D)
SymantecML.Attribute.HighConfidence
APEXMalicious
RisingTrojan.Crypto!8.364 (TFE:2:lGpISJAuUHN)
Ad-AwareGen:Heur.Mint.SP.Azorult.1
EmsisoftGen:Heur.Mint.SP.Azorult.1 (B)
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.Inject4.3666
InvinceaML/PE-A
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
AviraTR/Dropper.Gen
MAXmalware (ai score=88)
Antiy-AVLGrayWare/Win32.Kryptik.ehls
MicrosoftTrojan:Win32/Wacatac.C!ml
ArcabitTrojan.Mint.SP.Azorult.1
ZoneAlarmUDS:DangerousObject.Multi.Generic
GDataGen:Heur.Mint.SP.Azorult.1
CynetMalicious (score: 100)
BitDefenderThetaGen:NN.ZexaF.34570.qmW@aq4EFec
VBA32Malware-Cryptor.Bambarbiya
ESET-NOD32a variant of Win32/GenKryptik.EURT
SentinelOneDFI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
Cybereasonmalicious.737115
Qihoo-360HEUR/QVM20.1.B807.Malware.Gen

How to remove Win32/GenKryptik.EURT?

Win32/GenKryptik.EURT removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment