What is "Win32/GenKryptik.FGIG"?

The Win32/GenKryptik.FGIG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenKryptik.FGIG virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (4 unique times)
Creates RWX memory
Reads data out of its own binary image
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
Attempts to create or modify system certificates
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

tttttt.me

apps.identrust.com

How to determine Win32/GenKryptik.FGIG?


File Info:
crc32: 97F7BC31
md5: d49d3e406289105f66d140b6eac742d2
name: D49D3E406289105F66D140B6EAC742D2.mlw
sha1: b56c6834988f7d83a49f084eb2ddc349f06e3040
sha256: bb34cdaaf05a1bfeb6c3370bd5f1f3f20cd00078a988fa28b9798efbcada5d17
sha512: ac911e328a06fc2eee596f0b1639e4cb4bfbf3f709606e606f70007cedfb7b8327390c7acb183a1e9381329525e1653d2abb982aae8a1524695fcb4f67cef1d1
ssdeep: 24576:464oBLPAlPoIyGwNInpZ1Hsiju5uqC+es+3fznf:7LyPGxNID5sia5uqCTLf
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: 234 2 4234 23
InternalName:  4234 23 423 4234
FileVersion:  234 23 423
CompanyName: 4 234234234
ProductName:  234
ProductVersion: 234 234 23 423 4234
FileDescription: 23423 423423
OriginalFilename: 4 23 423 423
Translation: 0x0419 0x04b0

Win32/GenKryptik.FGIG also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.875789
Cylance	Unsafe
Sangfor	Infostealer.Win32.Racealer.ky
CrowdStrike	win/malicious_confidence_100% (W)
Cybereason	malicious.4988f7
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GenKryptik.FGIG
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	Trojan-PSW.Win32.Racealer.lgo
BitDefender	Gen:Variant.Razy.875789
MicroWorld-eScan	Gen:Variant.Razy.875789
Ad-Aware	Gen:Variant.Razy.875789
BitDefenderTheta	Gen:NN.ZexaF.34722.fz3@aWSXm8gk
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.d49d3e406289105f
Emsisoft	Gen:Variant.Razy.875789 (B)
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Caynamer.A!ml
AegisLab	Trojan.Win32.Racealer.i!c
GData	Win32.Trojan.PSE.41FR6H
McAfee	Artemis!D49D3E406289
MAX	malware (ai score=81)
VBA32	BScope.TrojanSpy.MSIL.Stealer
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002H07F821
Rising	Trojan.Generic@ML.81 (RDMK:wxre8M0NrG8S2ZS0+aIr+w)
Ikarus	Trojan.Win32.Krypt
Fortinet	W32/GenKryptik.FGIG!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml

How to remove Win32/GenKryptik.FGIG?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Win32/GenKryptik.FGIG”?