Win32/GenKryptik.EYHN removal instruction

The Win32/GenKryptik.EYHN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenKryptik.EYHN virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
A process created a hidden window
Uses Windows utilities for basic functionality
Executed a process and injected code into it, probably while unpacking
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/GenKryptik.EYHN?


File Info:
crc32: 8FA8C3D7
md5: 6a8d60ea3b02d445afd1fa30a1715806
name: 6A8D60EA3B02D445AFD1FA30A1715806.mlw
sha1: d14331f23780046d9d942bab66b82560d6fe26a0
sha256: 22d16073649932c7af1195471a69694f0871dbe81e38f21c340b0eb6112dedd9
sha512: 1b51e219df5b1f4873911acc098738ebcbdb828ae546e6917fa09b2361b77ca9b8b5b343c8b9500b5472c27d1395721c81bb3968a11f1034d28fa4b6a3092091
ssdeep: 49152:kKM/rb/rb/rb/rb/rb/rb/rb/rb/rb/rb/rb/rb/rb/rb/rb/rb/rb/rb/rb/rb:
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/GenKryptik.EYHN also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.806003
FireEye	Generic.mg.6a8d60ea3b02d445
ALYac	Gen:Variant.Razy.806003
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Gen:Variant.Razy.806003
K7GW	Spyware ( 0040f0131 )
K7AntiVirus	Spyware ( 0040f0131 )
APEX	Malicious
Avast	Win32:BankerX-gen [Trj]
Rising	Trojan.Generic@ML.97 (RDML:DO2DTmgssA7JTlPH3jaahg)
Ad-Aware	Gen:Variant.Razy.806003
Emsisoft	Gen:Variant.Razy.806003 (B)
McAfee-GW-Edition	BehavesLike.Win32.Trojan.vt
Sophos	ML/PE-A + Mal/EncPk-APV
Antiy-AVL	GrayWare/Win32.Kryptik.ehls
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Razy.DC4C73
GData	Gen:Variant.Razy.806003
Cynet	Malicious (score: 100)
McAfee	GenericRXMZ-LK!6A8D60EA3B02
MAX	malware (ai score=83)
VBA32	BScope.Backdoor.Vawtrak
ESET-NOD32	a variant of Win32/GenKryptik.EYHN
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Cridex.GYR!tr
BitDefenderTheta	Gen:NN.ZedlaF.34688.c24@a4Ae6cj
AVG	Win32:BankerX-gen [Trj]
Qihoo-360	HEUR/QVM40.1.E5AB.Malware.Gen

How to remove Win32/GenKryptik.EYHN?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/GenKryptik.EYHN removal instruction