Should I remove “Win32/GenKryptik.FWCM”?

The Win32/GenKryptik.FWCM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/GenKryptik.FWCM virus can do?

Authenticode signature is invalid

How to determine Win32/GenKryptik.FWCM?


File Info:
name: A48F808336EA9A92FA8C.mlw
path: /opt/CAPEv2/storage/binaries/660e613843da1722844e5459d698a3c6242050e540d4928cd85c0accf354a4ec
crc32: 5BA784FC
md5: a48f808336ea9a92fa8cf38e8ff8c278
sha1: 0b1556cf05f5ee778701928a5d7eb8710ccc468f
sha256: 660e613843da1722844e5459d698a3c6242050e540d4928cd85c0accf354a4ec
sha512: aaa3f9a96f8d7f227cc28e484673c9a94986bd04f9095f61649472a0ba3927fb48f0db5748109fa24189c12e07c008817e4bbf4e8e902cf352492f60b340e75b
ssdeep: 6144:fresw91O7tjkv4cr92FBxD65o6AOILdIJUfwvijCdTK994f7cTMc3:freJyBj84crS4BiBYdwMc
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10A648D13B393A472D5211D3504EC97BAB63DBB604BBAEED7A7940B6E0E302C1B731951
sha3_384: 8b89f19634d2b4f368926e9fd09dce391d382e7e58b9e21d4c43cac0581a7ccaeb8e239c197c1d65d557c4a630b0cc1f
ep_bytes: e8bc080000e97afeffff8b4df464890d
timestamp: 2022-06-26 22:15:09

Version Info:
0: [No Data]

Win32/GenKryptik.FWCM also known as:

Bkav	W32.AIDetect.malware2
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Barys.316120
FireEye	Gen:Variant.Barys.316120
ALYac	Gen:Variant.Barys.316120
Cylance	Unsafe
BitDefenderTheta	Gen:NN.ZexaF.34742.uqW@aW0A1qm
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/GenKryptik.FWCM
Kaspersky	HEUR:Trojan-Spy.Win32.Stealer.pef
BitDefender	Gen:Variant.Barys.316120
APEX	Malicious
Tencent	Win32.Trojan-spy.Stealer.Lmax
Ad-Aware	Gen:Variant.Barys.316120
Sophos	Generic ML PUA (PUA)
DrWeb	Trojan.PWS.Steam.28157
Trapmine	suspicious.low.ml.score
Emsisoft	Gen:Variant.Barys.316120 (B)
GData	Gen:Variant.Barys.316120
MAX	malware (ai score=85)
ZoneAlarm	HEUR:Trojan-Spy.Win32.Stealer.pef
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
Avast	CrypterX-gen [Trj]
Rising	Trojan.Generic@AI.92 (RDML:rqoGMlqYcKvkiqU2smlAow)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/GenKryptik.FVXI!tr
AVG	CrypterX-gen [Trj]

How to remove Win32/GenKryptik.FWCM?

Win32/GenKryptik.FWCM removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X