Malware

About “Win32/GenKryptik_AGen.APB” infection

Malware Removal

The Win32/GenKryptik_AGen.APB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/GenKryptik_AGen.APB virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Win32/GenKryptik_AGen.APB?


File Info:

name: B06EFA9F5DABB219CCCF.mlw
path: /opt/CAPEv2/storage/binaries/effdbe0c35ba6119dfd2ff84aafe3004d00bad096640281fe117139c6a3d61bd
crc32: 9E93FC0B
md5: b06efa9f5dabb219cccfa14ef41d79b3
sha1: 9fadc881e5ae50cf736c1c604b66b1fe3eeb75fd
sha256: effdbe0c35ba6119dfd2ff84aafe3004d00bad096640281fe117139c6a3d61bd
sha512: 31396b129576498e1e99c2377b8c5042d78e525ba7751c66f554732b2cd8a66c52dca5038de3b8d73b1694c68a36c7d95a436e4b32ffe8f48d82a823bf787c0d
ssdeep: 3072:YISS6PcHAPHetdDOtWc9yttlplvnq7viuh:YISoHX7DOTy/lplPq7viu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10B048F628970BB13E951093417E06BFB801D3D2F4BE50609BCADDA5F3763D9A349FA42
sha3_384: 61c08063db8c9a67cf28fd2af268db76f02567b49d05dfce9adacf32ae71464ce5d6f494c87742470784092ed14c8b1f
ep_bytes: 68c0914200e8f0ffffffcd0000000000
timestamp: 2019-04-26 10:28:09

Version Info:

0: [No Data]

Win32/GenKryptik_AGen.APB also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.VB.tsbh
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Midie.74955
ClamAVWin.Malware.Midie-6847893-0
FireEyeGeneric.mg.b06efa9f5dabb219
SkyhighBehavesLike.Win32.Generic.ct
McAfeeGenericRXHC-SS!B06EFA9F5DAB
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Variant.Midie.74955
SangforSuspicious.Win32.Save.vb
K7AntiVirusP2PWorm ( 00581a9e1 )
AlibabaTrojan:Win32/Muldrop.329
K7GWP2PWorm ( 00581a9e1 )
Cybereasonmalicious.1e5ae5
VirITTrojan.Win32.VBUCornT.DRP
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/GenKryptik_AGen.APB
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Agent.pef
BitDefenderGen:Variant.Midie.74955
NANO-AntivirusTrojan.Win32.VBClone.jtvkdl
AvastWin32:VB-AJKU [Trj]
RisingTrojan.VBClone!1.E032 (CLASSIC)
SophosMal/VB-AQT
F-SecureTrojan.TR/Crypt.ZPACK.Gen
DrWebTrojan.MulDrop17.61497
TrendMicroTROJ_GEN.R002C0DBS24
Trapminesuspicious.low.ml.score
EmsisoftGen:Variant.Midie.74955 (B)
IkarusTrojan.Crypt
GDataWin32.Trojan.VBClone.B
JiangminTrojan.VB.aqyg
GoogleDetected
AviraTR/Crypt.ZPACK.Gen
MAXmalware (ai score=80)
Antiy-AVLGrayWare/Win32.VP2.a
Kingsoftmalware.kb.a.1000
ArcabitTrojan.Midie.D124CB
ViRobotTrojan.Win.Z.Vbclone.188499.DF
ZoneAlarmHEUR:Trojan.Win32.Agent.pef
MicrosoftTrojanDropper:Win32/Muldrop.V!MTB
VaristW32/VB_Troj.J.gen!Eldorado
AhnLab-V3Trojan/Win.Generic.R603325
VBA32SScope.Trojan.VB
ALYacGen:Variant.Midie.74955
TACHYONTrojan/W32.VB-Agent.188499.D
Cylanceunsafe
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0DBS24
TencentTrojan.Win32.VB.ko
YandexTrojan.Agent!4o878RVpqTE
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/VBClone.D!tr
BitDefenderThetaAI:Packer.6AD2523D1F
AVGWin32:VB-AJKU [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Win32/GenKryptik_AGen.APB?

Win32/GenKryptik_AGen.APB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment