Packed.Win32.PolyCrypt.b removal tips

The Packed.Win32.PolyCrypt.b is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Packed.Win32.PolyCrypt.b virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Packed.Win32.PolyCrypt.b?


File Info:
crc32: 37919F9F
md5: dcb4e793ac13dbfde16b836f05d01b77
name: DCB4E793AC13DBFDE16B836F05D01B77.mlw
sha1: 11bd960c85ced0d5546da7603c6a244136a98eac
sha256: 216fd57824234b1e65f56f2209ec494b8267673ad8b7fe4e5c9ab0cfa7091aa4
sha512: fa78427efc3c42882e1694a01a9c94d6f304519c7ef09c847e7db07e79e8b208b81344fe4574b15f09509bcff190c10d927c013d069da93694ee09ed5485f940
ssdeep: 1536:6HgzesD8VYtmiijP0e21cJdQIkhVRIm0jJa7:61rPrcSJkhVRIFjJ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2002 James Joyce
InternalName: shutdown
FileVersion: 1.32
CompanyName: james.ezylink.net.au
PrivateBuild: 
LegalTrademarks: Copyright xa9 2002 James Joyce
Comments: Automatic Shutdown Software
ProductName:   shutdown Application
SpecialBuild: 
ProductVersion: 1.32
FileDescription: shutdown Application
OriginalFilename: shutdown.res
Translation: 0x0000 0x04b0

Packed.Win32.PolyCrypt.b also known as:

Lionic	Hacktool.Win32.PolyCrypt.3!c
Cylance	Unsafe
Zillya	Trojan.Krap.Win32.5492
Alibaba	Packed:Win32/PolyCrypt.d9577b6b
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
Kaspersky	Packed.Win32.PolyCrypt.b
NANO-Antivirus	Trojan.Win32.PolyCrypt.crryoh
Sophos	Mal/Generic-S
Comodo	Malware@#2m71s1d0fy93y
VIPRE	Trojan.Win32.Generic!BT
SentinelOne	Static AI – Suspicious PE
Jiangmin	Backdoor/Kamflao
Microsoft	Trojan:Win32/Wacatac.B!ml
TACHYON	Trojan/W32.Packer.73216.E
McAfee	Artemis!DCB4E793AC13
Panda	Trj/CI.A
Yandex	Trojan.Obfuscated!UDKbYtArJLo
Ikarus	Trojan-PWS.Win32.Freeone
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PolyCrypt.B
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Packed.Win32.PolyCrypt.b?

Packed.Win32.PolyCrypt.b removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X