Win32/GenKryptik_AGen.WF removal tips

The Win32/GenKryptik_AGen.WF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/GenKryptik_AGen.WF virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/GenKryptik_AGen.WF?


File Info:
name: E1363CACF308F21CF032.mlw
path: /opt/CAPEv2/storage/binaries/fcdb581840c872be24e254e3744e3fa43c1204f34e5a5f3dbd7ad3251aebcc2a
crc32: 8A0D24CB
md5: e1363cacf308f21cf032787fe775ebf3
sha1: 44e09d6e78db66832a9737f7c37e42735cf09336
sha256: fcdb581840c872be24e254e3744e3fa43c1204f34e5a5f3dbd7ad3251aebcc2a
sha512: ca1cfc8a6a2ccf4f20925501e6bcd67e9ccde3f466c6bcb753f43766574a768951989ae27e3b7c68a1499ed96993db22f7d71a1b96252b65ca6a053990529a77
ssdeep: 3072:JLQaL9tbLkRIgd1Lye9yjE2hWAN5XbxlUKL+LOfvpLthE+k3T68VF:RlZtbLWIgd1LZ9oECZbxlUS+LO5E+K
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T108446C1236C2C073E4B7023188E6C76877B6BDA19B3696CB7BC03B4D6E715D68A35351
sha3_384: 48ddf95f8995fa23cd379a4e4be6171f74c5c0d93bac61796607009dd61ee43cdde78fd2aed7a59e22cc63b8c813b981
ep_bytes: 54b99c3102008ab1ff0f4000c0ceea80
timestamp: 2011-07-11 06:27:43

Version Info:
0: [No Data]

Win32/GenKryptik_AGen.WF also known as:

DrWeb	Trojan.MulDrop5.42246
MicroWorld-eScan	Gen:Variant.Zusy.457295
FireEye	Generic.mg.e1363cacf308f21c
McAfee	GenericRXNE-YU!E1363CACF308
Malwarebytes	Generic.Trojan.Malicious.DDS
VIPRE	Gen:Variant.Zusy.457295
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005701231 )
K7GW	Trojan ( 005701231 )
Cybereason	malicious.cf308f
Arcabit	Trojan.Zusy.D6FA4F
BitDefenderTheta	Gen:NN.ZexaF.36196.pKY@aShChWp
VirIT	Trojan.Win32.MulDrop5.CKMW
Cyren	W32/Agent.FVU.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/GenKryptik_AGen.WF
APEX	Malicious
ClamAV	Win.Malware.Zusy-9759517-0
Kaspersky	Trojan.Win32.Agent.antno
BitDefender	Gen:Variant.Zusy.457295
NANO-Antivirus	Trojan.Win32.Mlw.icfslb
Avast	Win32:Evo-gen [Trj]
Tencent	Trojan.Win32.Agent.zl
Sophos	Mal/EncPk-APJ
McAfee-GW-Edition	BehavesLike.Win32.Sytro.dm
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Zusy.457295 (B)
SentinelOne	Static AI – Malicious PE
Google	Detected
Antiy-AVL	Trojan/Win32.Agent.WTK
Xcitium	TrojWare.Win32.Aenjaris.ABC@8hq1l4
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	Trojan.Win32.Agent.antno
GData	Win32.Trojan.BadJoke.J
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.DF.R566591
ALYac	Gen:Variant.Zusy.457295
MAX	malware (ai score=88)
Zoner	Trojan.Win32.31738
Rising	Trojan.Agent!1.A728 (CLASSIC)
Ikarus	Trojan-Banker.Emotet
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.WTK!tr
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32/GenKryptik_AGen.WF?

Win32/GenKryptik_AGen.WF removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X