Malware

How to remove “Win32/GenKryptik.EZKS”?

Malware Removal

The Win32/GenKryptik.EZKS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/GenKryptik.EZKS virus can do?

  • Executable code extraction
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option

How to determine Win32/GenKryptik.EZKS?


File Info:

crc32: B774F0FD
md5: ae7d4cfa4b65e71d5cad18bb990d7b45
name: AE7D4CFA4B65E71D5CAD18BB990D7B45.mlw
sha1: 0d9ba8216ef7881f6a6fb51d7810be0059efa4ad
sha256: 800c26a3e7cd6b65e7221e0e493d9e5ac6c7fd8319355a8be31ad59ed1843534
sha512: 08ba577fd1f5c61144fd6832801876866d42999c61c6d061b4eb0732d720460bfc1a150c4c09eacfecb5d606ff0b94c2714cd7d325ee705d8e7016cadb0e9204
ssdeep: 1536:22Krz9sZHwvz1xrp8Q2y3D4482t/CY7dIVLkeogZexM1CQnDJ4vylekGVog73n9:PKrz9mHw5xrgRg/3gZTCQl4aleZoq98
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 1996
InternalName: GRAPH
FileVersion: 1, 0, 0, 1
CompanyName:
LegalTrademarks:
ProductName: GRAPH Application
ProductVersion: 1, 0, 0, 1
FileDescription: GRAPH MFC Application
OriginalFilename: GRAPH.EXE
Translation: 0x0409 0x04b0

Win32/GenKryptik.EZKS also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.45317471
FireEyeGeneric.mg.ae7d4cfa4b65e71d
CAT-QuickHealTrojan.Multi
McAfeeRDN/Generic.dx
CylanceUnsafe
ZillyaTrojan.GenKryptik.Win32.69969
AegisLabTrojan.Multi.Generic.4!c
SangforMalware
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.GenericKD.45317471
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.a4b65e
CyrenW32/Zegost.DM.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Malware.Deepscan-6824108-0
KasperskyHEUR:Backdoor.Win32.Farfli.gen
AlibabaBackdoor:Win32/Farfli.91b62326
RisingTrojan.GenKryptik!8.AA55 (TFE:5:OcIS0LKkeiT)
Ad-AwareTrojan.GenericKD.45317471
EmsisoftTrojan.GenericKD.45317471 (B)
ComodoMalware@#1pkioyvzxd0h2
F-SecureTrojan.TR/Kryptik.tboby
DrWebBackDoor.Siggen2.3334
VIPRETrojan.Win32.Generic!BT
TrendMicroBackdoor.Win32.FARFLI.THAOGBA
McAfee-GW-EditionRDN/Generic.dx
SophosMal/Generic-S
IkarusTrojan.Win32.Farfli
WebrootW32.Trojan.Gen
AviraTR/Kryptik.tboby
MAXmalware (ai score=81)
Antiy-AVLTrojan[Backdoor]/Win32.Farfli
KingsoftWin32.Hack.Undef.(kcloud)
MicrosoftTrojan:Win32/Farfli.DSK!MTB
GridinsoftTrojan.Win32.Kryptik.oa
ArcabitTrojan.Generic.D2B37D5F
ZoneAlarmHEUR:Backdoor.Win32.Farfli.gen
GDataTrojan.GenericKD.45317471
CynetMalicious (score: 85)
AhnLab-V3Malware/Win32.Generic.C4287797
BitDefenderThetaGen:NN.ZexaF.34760.By0@aOgqE3pj
ALYacTrojan.GenericKD.45317471
VBA32BScope.Backdoor.Farfli
MalwarebytesTrojan.Banker
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/GenKryptik.EZKS
TrendMicro-HouseCallBackdoor.Win32.FARFLI.THAOGBA
YandexTrojan.Agent!Xxb/IceGVfM
FortinetW32/GenKryptik.EOZH!tr
AVGWin32:Malware-gen
AvastWin32:Malware-gen
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Backdoor.4a6

How to remove Win32/GenKryptik.EZKS?

Win32/GenKryptik.EZKS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment