Win32/GenKryptik.FWKF removal guide

The Win32/GenKryptik.FWKF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/GenKryptik.FWKF virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/GenKryptik.FWKF?


File Info:
name: CCAAD09DFBC59B7A1D20.mlw
path: /opt/CAPEv2/storage/binaries/9d874d6a71e60b009c9db6463754efd1e3d1769e5599d3319be59a7a42d2bcc3
crc32: 7D3D9FD2
md5: ccaad09dfbc59b7a1d208866b3a66608
sha1: 503649be247b7461c3e6be3d424ec6896807899f
sha256: 9d874d6a71e60b009c9db6463754efd1e3d1769e5599d3319be59a7a42d2bcc3
sha512: 4ed6d7889cdb5fb95129a116c3c8bfffa9e237ddee119865027f594acfc7a9ff6f1f6e21e19427e6ed0edfcd1a6678b70548e66205908be3c2021f1f6e7e307b
ssdeep: 6144:zf72J8RUNKBP3nMEm7q7SZb6vdlxa8asV:zTw8bP3nMEm7/Zb6vdlxaGV
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D0549E12BE90C172D451C0B106EDBB3BEA38DB701B205BC3B389DE656B316E1963D697
sha3_384: 9e302760813f7f2d4fda824537fc766f81fd480c9f44ff74ac5a70e623e1b90ca4365ded508f7959b0af8b99ebac526c
ep_bytes: 6a706870170001e8b602000033ff57ff
timestamp: 2001-08-17 20:51:15

Version Info:
0: [No Data]

Win32/GenKryptik.FWKF also known as:

FireEye	Generic.mg.ccaad09dfbc59b7a
McAfee	Artemis!CCAAD09DFBC5
Cylance	Unsafe
K7AntiVirus	Trojan ( 00594b6e1 )
K7GW	Trojan ( 00594b6e1 )
Cybereason	malicious.dfbc59
Cyren	W32/Ipamor.DI.gen!Eldorado
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/GenKryptik.FWKF
APEX	Malicious
ClamAV	Win.Malware.Plyromt-9944720-0
Avast	Win32:WormX-gen [Wrm]
DrWeb	Trojan.DownLoader11.15819
McAfee-GW-Edition	Artemis!Trojan
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R494814
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.34742.rmZ@auhVWnli
VBA32	Trojan.Wacatac
Rising	Trojan.Generic!8.C3 (RDMK:cmRtazruP35geLgoBIzGQnvl/4Uw)
Ikarus	Trojan.Win32.Hider
Fortinet	W32/Ipamor.7AD6!tr
AVG	Win32:WormX-gen [Wrm]
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Win32/GenKryptik.FWKF?

Win32/GenKryptik.FWKF removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X