Malware

Win32/GenKryptik.FBGW removal

Malware Removal

The Win32/GenKryptik.FBGW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Win32/GenKryptik.FBGW virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

How to determine Win32/GenKryptik.FBGW?



File Info:

crc32: ADB54B1F
md5: 79295a69bef6505b4bfefb515dcdf197
name: 79295A69BEF6505B4BFEFB515DCDF197.mlw
sha1: b85fb16ed2b008b1d1e5efa0d0952b1988bfbff3
sha256: 931e4037315c6ba307193148bc9e900a84660cedf772a75cfec68260d674d492
sha512: 150329dfd8beb5f67d133a8d3020559499e78b85fe07670c356b6aa389cae3ef6ab1e71109c7b8d59e5f4189cd9cfa639a6a86638ead45c1b2acd05c50d0df3b
ssdeep: 24576:trwgNInqCmsHSX/7GMUtm7tWV7bSGGQNJFE2OEkziepGHS6XvlOTHaFDzTuY:trwgN0qCmc0/7HV7tWVyGVNJFE21opU
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed


Version Info:

LegalCopyright: x7248x6743x6240x6709 (C) 2002
InternalName: RMS
FileVersion: 1, 0, 0, 1
CompanyName: 
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: RMS x5e94x7528x7a0bx5e8f
SpecialBuild: 
ProductVersion: 1, 0, 0, 1
FileDescription: RMS Microsoft x57fax7840x7c7bx5e94x7528x7a0bx5e8f
OriginalFilename: RMS.EXE
Translation: 0x0804 0x04b0

Win32/GenKryptik.FBGW also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
FireEyeGeneric.mg.79295a69bef6505b
McAfeeArtemis!79295A69BEF6
CylanceUnsafe
SangforTrojan.Win32.Save.a
BitDefenderThetaGen:NN.ZexaF.34590.pnKfayaicxjb
SymantecBackdoor.Nitol
APEXMalicious
AlibabaTrojan:Win32/GenKryptik.632bd55e
ComodoTrojWare.Win32.ServStart.CB@7486ss
F-SecureHeuristic.HEUR/AGEN.1111385
McAfee-GW-EditionBehavesLike.Win32.Dropper.tc
SentinelOneStatic AI – Suspicious PE
GDataWin32.Trojan.Agent.H5FTU8
AviraHEUR/AGEN.1111385
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftTrojan:Win32/Wacatac.D9!ml
CynetMalicious (score: 90)
VBA32BScope.Trojan.Downloader
MalwarebytesMalware.Heuristic.1003
ESET-NOD32a variant of Win32/GenKryptik.FBGW
RisingTrojan.GenKryptik!8.AA55 (CLOUD)
IkarusTrojan.Win32.Krypt
FortinetW32/GenKryptik.FBGW!tr
AVGWin32:MalwareX-gen [Trj]
AvastWin32:MalwareX-gen [Trj]
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360Trojan.Generic

How to remove Win32/GenKryptik.FBGW?

Win32/GenKryptik.FBGW removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment