Win32/GenKryptik.FYXE removal

The Win32/GenKryptik.FYXE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/GenKryptik.FYXE virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the RaccoonV2 malware family

How to determine Win32/GenKryptik.FYXE?


File Info:
name: 3D27D1575262552ED76F.mlw
path: /opt/CAPEv2/storage/binaries/3bf0e1d823e337ba4372bd55bb57d93789bda09c5bf3d8b82a308781c8f9a09f
crc32: 1BBC9DF2
md5: 3d27d1575262552ed76fa026326050c3
sha1: 9fd6361e5727b2336484c8e06a510c7d324ae72a
sha256: 3bf0e1d823e337ba4372bd55bb57d93789bda09c5bf3d8b82a308781c8f9a09f
sha512: bdb18886349b7768983d93a17035abf61fead62e4b3f0e00f954a5305aec0774eb0f18c80f7a95c9f23cb29c75b59196f03ff2a1e2e802bb0b4bb9aa4118af67
ssdeep: 3072:zaKPKyDevzoJt4BNK4FUdNqlNJprDdMOW2NkOphgOAg0FujDR5KB75VwsnLx42kh:OXyivzY47K4GdNE1uOWW7AObsKtJ1
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1DB348D17F191C033DDF218714CF49A79693CF9610BA68DFB53B40B5E8F206D1A6329AA
sha3_384: e38709f4c98bc465007fed7a01e06ef73c16c224dd7fb4507edc022e06b9d69b2fc837543f5ca76488d56fab48dceb07
ep_bytes: e8d6050000e974feffff558bec8b4508
timestamp: 2022-08-17 07:00:18

Version Info:
0: [No Data]

Win32/GenKryptik.FYXE also known as:

Elastic	malicious (high confidence)
FireEye	Generic.mg.3d27d1575262552e
CAT-QuickHeal	Ransomware.Tescrypt.WR5
Cybereason	malicious.e5727b
BitDefenderTheta	Gen:NN.ZexaF.34592.pqW@aqxpvSe
Cyren	W32/SmokeLoader.C.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GenKryptik.FYXE
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Spy.Win32.Stealer.gen
Avast	PWSX-gen [Trj]
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
Trapmine	malicious.moderate.ml.score
Ikarus	Trojan.Win32.Crypt
Google	Detected
Avira	HEUR/AGEN.1250662
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	VHO:Trojan-PSW.Win32.Convagent.gen
Cynet	Malicious (score: 100)
Acronis	suspicious
Malwarebytes	Malware.AI.681841546
Rising	Malware.Obscure/Heur!1.9E03 (CLASSIC)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
AVG	PWSX-gen [Trj]
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Win32/GenKryptik.FYXE?

Win32/GenKryptik.FYXE removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X