Malware

How to remove “Win32/GenKryptik.FIOU”?

Malware Removal

The Win32/GenKryptik.FIOU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/GenKryptik.FIOU virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (4 unique times)
  • Creates RWX memory
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Attempts to create or modify system certificates
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

telete.in
apps.identrust.com

How to determine Win32/GenKryptik.FIOU?


File Info:

crc32: 4BEB7623
md5: 8a8470632db10c3b2e4d35b47506a68d
name: 8A8470632DB10C3B2E4D35B47506A68D.mlw
sha1: 5875dcad453931507e46d13a5c14eb052cf4d6f9
sha256: 76be54f6563829ebf3b3d066a06674a8c52558ab9492f30c5ae284187aeec557
sha512: 17f97d982d757024a805ba65d313f992143db367c96e03e1eda73440e98dabceae994a17aa3a87ff6e1635d589b7f5f9e149bfbd2ded96a6989509b494bc7aa1
ssdeep: 12288:F0YnpIUpNZXthUOiTtIVPyNf0wh46YrcbkCB6Ei04LEcF:F0Ep13chmq0wmSbkwH4X
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: sagzmioloke.awi
ProductVersion: 7.59.22.123
Copyright: Copyrighz (C) 2021, fudkageta
Translation: 0x0183 0x022e

Win32/GenKryptik.FIOU also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Convagent.m!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader41.27120
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/GenKryptik.69b8e18b
K7GWTrojan ( 0056f9be1 )
K7AntiVirusTrojan ( 0056f9be1 )
CyrenW32/Kryptik.EWJ.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GenKryptik.FIOU
APEXMalicious
AvastFileRepMetagen [Malware]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Zenpak.gen
SophosMal/Generic-R + Troj/Krypt-W
BitDefenderThetaGen:NN.ZexaF.34104.Eq0@auoKBHgG
TrendMicroMal_HPGen-50
McAfee-GW-EditionBehavesLike.Win32.Emotet.gc
FireEyeGeneric.mg.8a8470632db10c3b
EmsisoftTrojan.Crypt (A)
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_96%
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
AhnLab-V3CoinMiner/Win.Glupteba.R438695
McAfeeArtemis!8A8470632DB1
MalwarebytesMachineLearning/Anomalous.97%
TrendMicro-HouseCallMal_HPGen-50
RisingTrojan.Kryptik!1.D8AC (CLASSIC)
IkarusTrojan.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.HMFE!tr
AVGFileRepMetagen [Malware]
Paloaltogeneric.ml

How to remove Win32/GenKryptik.FIOU?

Win32/GenKryptik.FIOU removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment