Malware

Win32/GenKryptik.FNPF malicious file

Malware Removal

The Win32/GenKryptik.FNPF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/GenKryptik.FNPF virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/GenKryptik.FNPF?


File Info:

crc32: 2753F0E0
md5: f6027b9cbd2a41d7e42da11352ca6222
name: F6027B9CBD2A41D7E42DA11352CA6222.mlw
sha1: 9761b13a0e8abd6dadad5d605045d48bb0cb34d3
sha256: 48f2113fda7c747f0b8ecced1b688d322f30c224729d5d98548e6679ef1f3872
sha512: c39b09d4862f0ce463976bccf48f9c5858388659d73092f414070c30c7b7d7595eb9776286919f04f6f77dc70c7d2f9dd0549c02e55c47cda1d748670d8ce8d7
ssdeep: 1536:+2Zi3knSXMYNJ4IurNPOCuZzwlwUD4S6UqaY6:gn/4QD9wDDjUM
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
LegalCopyright: ART
InternalName: Winemastern
FileVersion: 1.00
CompanyName: ART
LegalTrademarks: ART
Comments: ART
ProductName: ART
ProductVersion: 1.00
FileDescription: Classic ART
OriginalFilename: Winemastern.exe

Win32/GenKryptik.FNPF also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
CrowdStrikewin/malicious_confidence_80% (D)
Cybereasonmalicious.a0e8ab
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GenKryptik.FNPF
APEXMalicious
AvastWin32:Trojan-gen
KasperskyTrojan.Win32.Shelsy.at
SophosML/PE-A
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.f6027b9cbd2a41d7
AviraTR/AD.Nekark.kkgpx
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataWin32.Trojan.Agent.BNL3O3
McAfeeArtemis!F6027B9CBD2A
PandaTrj/RnkBend.A
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.FNPF!tr
AVGWin32:Trojan-gen

How to remove Win32/GenKryptik.FNPF?

Win32/GenKryptik.FNPF removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment