Win32/GenKryptik.GKHU removal guide

The Win32/GenKryptik.GKHU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/GenKryptik.GKHU virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Win32/GenKryptik.GKHU?


File Info:
name: 4CF68924F96ED47BB96E.mlw
path: /opt/CAPEv2/storage/binaries/e101d4ad1163544de83e3bded01f7af873ac509c13710007a093a71b92b32813
crc32: 4A9380E7
md5: 4cf68924f96ed47bb96e7b3705aff800
sha1: 73ea49fc77b248532e4e408b191b91486eef5084
sha256: e101d4ad1163544de83e3bded01f7af873ac509c13710007a093a71b92b32813
sha512: adc7ceb72078d53d2f836a747d7145eb86838d26614d3e4965998de86ad724b0776eaa5ee973fea3b3fe5683c6254ec141a5e996ea516b5970f16ace88d3718f
ssdeep: 3072:nlW8LdkFeH9yDLdUvYskcKwjVo0jIaBCNfR87eLteIejz5y:nlBmoH9yD5UvLFKoj6IQsFH
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16BF33C02644CC092D5127B34249F6F71B36EBF48816C8F2F9BB0EDB89977641385DAAD
sha3_384: a76c5e6d5c709e90f6fef6f503923bf48bb7d993caeeec84dd3bc4a1d49f251bd1525b2012ee4470687d726e0f6f0416
ep_bytes: 558bec6aff682829420068dc0f420064
timestamp: 2013-04-02 07:48:20

Version Info:
Comments: 
CompanyName: 
FileDescription: Microsft Application
FileVersion: 1, 0, 0, 1
InternalName: Microsft App
LegalCopyright: Copyright (C) 2005
LegalTrademarks: 
OriginalFilename: 
PrivateBuild: 
ProductName: Microsft Application
ProductVersion: 1, 0, 0, 1
SpecialBuild: 
Translation: 0x0409 0x04b0

Win32/GenKryptik.GKHU also known as:

McAfee	Artemis!4CF68924F96E
BitDefenderTheta	Gen:NN.ZexaCO.36250.kq0@auBrzElO
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/GenKryptik.GKHU
APEX	Malicious
Cynet	Malicious (score: 100)
Avast	Win32:GenMalicious-MFZ [Trj]
F-Secure	Trojan.TR/AD.Farfli.mbmbg
TrendMicro	TROJ_PLEAD.SMZTEG
McAfee-GW-Edition	BehavesLike.Win32.BadFile.cm
Avira	TR/AD.Farfli.mbmbg
Microsoft	Trojan:Win32/Wacatac.B!ml
Cylance	unsafe
TrendMicro-HouseCall	TROJ_PLEAD.SMZTEG
Rising	Trojan.Generic@AI.86 (RDML:Zwkjmw1cWezf5/ygtdF1zw)
Fortinet	W32/PLEAD.SMZTEG!tr
AVG	Win32:GenMalicious-MFZ [Trj]
DeepInstinct	MALICIOUS

How to remove Win32/GenKryptik.GKHU?

Win32/GenKryptik.GKHU removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X