Should I remove "Win32/GenKryptik.FBWT"?

The Win32/GenKryptik.FBWT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenKryptik.FBWT virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (2 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Performs some HTTP requests
Unconventionial binary language: Russian
Collects information about installed applications
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/GenKryptik.FBWT?


File Info:
crc32: EAF44FB9
md5: 5cb98dc4e31e1e09b9ecf06a5fbc75f2
name: 5CB98DC4E31E1E09B9ECF06A5FBC75F2.mlw
sha1: 4f8d8d02dbfbd65b7c24d46c0439ee245941470a
sha256: 4e8b50459a8033a3e81008fe1e01df1997193d59f1012125325ee127281f387d
sha512: 3a97dbed4172bdc59f505dc79fb67cf394eb2701c7ea2dc8778ebb97426f4bfb89031fc0667b3fe964f7b18e4561ce6e7aba840a412f654c24257bf7f9e30c6a
ssdeep: 12288:vbqkjZw1Vu8MpJYosZUmc16RWdrpo8+FFcLxT8HoxmRsDJteMKTO81MOU7qOkQR:vbqkjZwqxYjxoArwQobmMKFiOUFkK1
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 1998-2019 VMware, Inc.
InternalName: vmwarecui
FileVersion: 15.8.2 build-223
CompanyName: VMware, Inc.
ProductName: VMware Workstation
ProductVersion: 15.8.2 build-223
FileDescription: VMware cui library
OriginalFilename: heart.dll
Translation: 0x0419 0x04e3

Win32/GenKryptik.FBWT also known as:

Elastic	malicious (high confidence)
McAfee	Artemis!5CB98DC4E31E
APEX	Malicious
Paloalto	generic.ml
Kaspersky	UDS:DangerousObject.Multi.Generic
Rising	Malware.Heuristic!ET#76% (RDMK:cmRtazqId5Afo/fX9PHQUA3mJ2DN)
McAfee-GW-Edition	Artemis!Trojan
Sophos	ML/PE-A
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Cynet	Malicious (score: 90)
ESET-NOD32	a variant of Win32/GenKryptik.FBWT
Ikarus	Trojan-Spy.Win32.Tepfer
Panda	Trj/RnkBend.A

How to remove Win32/GenKryptik.FBWT?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Win32/GenKryptik.FBWT”?