Win32/Gpcode.NAI malicious file

The Win32/Gpcode.NAI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Gpcode.NAI virus can do?

Anomalous binary characteristics

How to determine Win32/Gpcode.NAI?


File Info:
crc32: 7770E8AB
md5: 21f54e4232a79730017f75744c199229
name: 21F54E4232A79730017F75744C199229.mlw
sha1: f737bbdb888773e416a4ea081adefd0a701b4c97
sha256: 89ece50b30840c3c6ec07cc1cc9a0dcb19b2cb6676d83c60975bfa5e76c20bac
sha512: e201e330a11867aab37c78ed6eec9154752535881233e38421dedbd656ce0a049400697731b24e6cb233dacfb88c0a4c3c774b60e2110df0e77e46b7ffbe0be5
ssdeep: 1536:sasG57mvJ167qup1o7WZ6GQDFQCLEDdMIkVp3m8XDNHdLYgmr+NtHHH+l93H2FN:sbEcJMd3cx7eiskUC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/Gpcode.NAI also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 003f437b1 )
Lionic	Trojan.Multi.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	Ransom.Crypren.6971
Cylance	Unsafe
Zillya	Trojan.Gpcode.Win32.69
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
K7GW	Trojan ( 003f437b1 )
Cybereason	malicious.b88877
Symantec	Ransom.OMG
ESET-NOD32	a variant of Win32/Gpcode.NAI
Zoner	Probably Heur.ExeHeaderP
APEX	Malicious
Avast	Win32:Ransom-ASQ [Trj]
Kaspersky	UDS:DangerousObject.Multi.Generic
NANO-Antivirus	Trojan.Win32.Graftor.fbeexw
Tencent	Win32.Trojan.Graftor.Hryz
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34110.vyW@aOQwtu
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Infected.fz
FireEye	Generic.mg.21f54e4232a79730
SentinelOne	Static AI – Malicious PE
Avira	TR/Graftor.116159
eGambit	Unsafe.AI_Score_99%
Microsoft	Ransom:Win32/Fortrypt.A
GData	Win32.Trojan-Ransom.GPCode.A
Acronis	suspicious
McAfee	GenericRXDH-QK!21F54E4232A7
MAX	malware (ai score=99)
Panda	Trj/CI.A
Rising	Trojan.Generic@ML.93 (RDML:xzDF75noWT5UWPQtVnKViQ)
Yandex	Trojan.Gpcode!37In0hOv4tM
Ikarus	Flooder.Win32.Agent.m
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Gpcode.NAI!tr.ransom
AVG	Win32:Ransom-ASQ [Trj]
Paloalto	generic.ml

How to remove Win32/Gpcode.NAI?

Win32/Gpcode.NAI removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X