Win32/GenKryptik.FIQR malicious file

The Win32/GenKryptik.FIQR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenKryptik.FIQR virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/GenKryptik.FIQR?


File Info:
crc32: A74EC9AD
md5: 36294abf1c51ee0e22e5a84e0abe1275
name: 36294ABF1C51EE0E22E5A84E0ABE1275.mlw
sha1: 1de29e996ffecb39b69043d12ae2e4941c953f5a
sha256: 0dab4890855fecad4fab62a137c452b2273d61d3e2a7c0946fd3739c1112b9ad
sha512: ff8ba71032dc02ddd0125abb1cfaddb6bb4ad7c1345ea5b74c35159c559079e5e8ac2d0e6def3b76ee3ee59415bb09960ac67e57ff2325ec5a830ba3541dd686
ssdeep: 1536:0EWVO2BXVgCuv+Ka4dp14unUcFfjlHJiMhvHfjwH0Y/WmMDk5xeZPWKRPDG9POt:uBdaCPS14unzplpu+pkQPfPUPyN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: SEKSAARSDRENGSSE
FileVersion: 1.00
CompanyName: ClosedAIR
Comments: ClosedAIR
ProductName: ClosedAIR
ProductVersion: 1.00
FileDescription: ClosedAIR
OriginalFilename: SEKSAARSDRENGSSE.exe

Win32/GenKryptik.FIQR also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
ALYac	Trojan.Agent.GuLoader
Sangfor	Trojan.Win32.Save.a
Alibaba	Trojan:Win32/GenKryptik.55888886
Cybereason	malicious.96ffec
Cyren	W32/Kryptik.EWM.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GenKryptik.FIQR
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Trojan.Win32.Mucc.pxk
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Kryptik.pufos
BitDefenderTheta	Gen:NN.ZevbaCO.34058.gm0@aakFgLgi
McAfee-GW-Edition	PWS-FCXW!36294ABF1C51
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Caynamer.A!ml
AhnLab-V3	Trojan/Win.Agent.R436252
McAfee	GuLoader-FCXW!36294ABF1C51
VBA32	TScope.Trojan.VB
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R06CH06H921
Ikarus	Trojan.Win32.Krypt
Fortinet	W32/FCXW!tr.pws
AVG	Win32:Trojan-gen
Paloalto	generic.ml

How to remove Win32/GenKryptik.FIQR?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/GenKryptik.FIQR malicious file