Malware

How to remove “Win32/GenKryptik_AGen.APB”?

Malware Removal

The Win32/GenKryptik_AGen.APB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/GenKryptik_AGen.APB virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Win32/GenKryptik_AGen.APB?


File Info:

name: 8E9A9D906705801C3E2E.mlw
path: /opt/CAPEv2/storage/binaries/d71dd57525c2796aade0ca2bd22591b752056a1ff71c0f5c8aa15e38b2edf197
crc32: CF5A976F
md5: 8e9a9d906705801c3e2e9a5eeeb5799d
sha1: 82b8210b270b454a489f9e0e409435d44684d310
sha256: d71dd57525c2796aade0ca2bd22591b752056a1ff71c0f5c8aa15e38b2edf197
sha512: 6a3fdd3bf1f4618bd1f45be208a17689816ab1ff3373f9c10abdcf9f21f858471ab08325f2b78ec5199db937c2cac80a29feabe86546be113ffe74308d420cc4
ssdeep: 3072:YISS61cH5jHetdDOtWc98ttHXlvnqyviuN:YISKHM7DOT8/HXlPqyviu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12F048F628970BB13E951093417E06BFB801D3D2F4BE50609BCADDA5F3763D9A349FA42
sha3_384: 964b449ec47c63d6631f398ec7f992277f4e4328cd9bfb21297a2a22483824c8f76580b672f9acf9d67eaf258a7d5f70
ep_bytes: 68c0914200e8f0ffffffcd0000000000
timestamp: 2019-04-26 10:28:09

Version Info:

0: [No Data]

Win32/GenKryptik_AGen.APB also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Midie.74955
FireEyeGeneric.mg.8e9a9d906705801c
SkyhighBehavesLike.Win32.Generic.ct
McAfeeGenericRXHA-ZI!8E9A9D906705
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Variant.Midie.74955
SangforSuspicious.Win32.Save.vb
K7AntiVirusP2PWorm ( 00581a9e1 )
K7GWP2PWorm ( 00581a9e1 )
Cybereasonmalicious.b270b4
VirITTrojan.Win32.VBUCornT.DRP
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/GenKryptik_AGen.APB
APEXMalicious
ClamAVWin.Malware.Midie-6847893-0
KasperskyHEUR:Trojan.Win32.Agent.pef
BitDefenderGen:Variant.Midie.74955
NANO-AntivirusTrojan.Win32.VBClone.jtvkdl
AvastWin32:VB-AJKU [Trj]
TencentTrojan.Win32.VB.ko
TACHYONTrojan/W32.VB-Agent.188509.E
EmsisoftGen:Variant.Midie.74955 (B)
F-SecureTrojan.TR/Crypt.ZPACK.Gen
DrWebTrojan.MulDrop17.61497
Trapminesuspicious.low.ml.score
SophosMal/VB-AQT
IkarusTrojan.Crypt
GDataWin32.Trojan.VBClone.B
JiangminTrojan.VB.aqyg
GoogleDetected
AviraTR/Crypt.ZPACK.Gen
VaristW32/VB_Troj.J.gen!Eldorado
Antiy-AVLGrayWare/Win32.VP2.a
Kingsoftmalware.kb.a.1000
ArcabitTrojan.Midie.D124CB
ZoneAlarmHEUR:Trojan.Win32.Agent.pef
MicrosoftTrojanDropper:Win32/Muldrop.V!MTB
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.R603325
BitDefenderThetaAI:Packer.6AD2523D1F
ALYacGen:Variant.Midie.74955
MAXmalware (ai score=89)
VBA32SScope.Trojan.VB
Cylanceunsafe
RisingTrojan.VBClone!1.E032 (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/VBClone.D!tr
AVGWin32:VB-AJKU [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Win32/GenKryptik_AGen.APB?

Win32/GenKryptik_AGen.APB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment