Malware

How to remove “Sf:Crypt-AQ [Trj]”?

Malware Removal

The Sf:Crypt-AQ [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Sf:Crypt-AQ [Trj] virus can do?

  • Network activity detected but not expressed in API logs

How to determine Sf:Crypt-AQ [Trj]?


File Info:

crc32: 35B2F321
md5: ab9c50388a39ba9d9617ef2bdf763cc8
name: gg.exe
sha1: 4b0d2377ee53574724ba0fe0960f86d875280e18
sha256: acf637890b310dfd3d781ea621abdb19c8d3004fc979f5f9914521bbf52ae096
sha512: b39bbd32b043ffa314dbbc18ca0e07c5a46bb0b693b74511fafa69cdfff5d7262be24ffba7f39069cd4c2251309bf37bfa9b2081105939ba2eda1c9a1a1173c5
ssdeep: 6144:Wg5JHngDhIJeFA2eFAkhIqfs4i2TAzS9/zZN+w:xJg4z2ze0KU0N
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2018 - 2019
Assembly Version: 0.0.0.0
InternalName: gg.exe
FileVersion: 4.5.7.9
CompanyName: xF/38%pYA7+z2
Comments: pF+94$dRH7!sgM8
ProductName: Ck6}q%Y3_8sQtP7*J?
ProductVersion: 4.5.7.9
FileDescription: Ck6}q%Y3_8sQtP7*J?
OriginalFilename: gg.exe

Sf:Crypt-AQ [Trj] also known as:

MicroWorld-eScanTrojan.GenericKD.33742228
FireEyeGeneric.mg.ab9c50388a39ba9d
McAfeeRDN/Generic.tfr
CylanceUnsafe
VIPRETrojan.Win32.Fareit.j (fs)
SangforMalware
K7AntiVirusTrojan ( 00565a8c1 )
BitDefenderTrojan.GenericKD.33742228
K7GWTrojan ( 00565a8c1 )
Cybereasonmalicious.7ee535
BitDefenderThetaGen:NN.ZemsilF.34108.ym0@aKAuIEd
ESET-NOD32a variant of MSIL/Kryptik.VRB
BaiduWin32.Trojan-PSW.Fareit.a
APEXMalicious
AvastSf:Crypt-AQ [Trj]
GDataTrojan.GenericKD.33742228
KasperskyHEUR:Trojan.Win32.Generic
AlibabaTrojan:MSIL/Kryptik.800a539d
TencentWin32.Trojan.Generic.Lpbo
Endgamemalicious (high confidence)
SophosMal/Generic-S
ComodoMalware@#11lczqtrwbt1e
F-SecureTrojan.TR/Kryptik.vkbas
DrWebTrojan.PWS.Stealer.28441
TrendMicroTrojan.MSIL.WACATAC.THDBIBO
McAfee-GW-EditionBehavesLike.Win32.Trojan.fh
Trapminemalicious.moderate.ml.score
EmsisoftTrojan.GenericKD.33742228 (B)
SentinelOneDFI – Malicious PE
CyrenW32/MSIL_Kryptik.AQA.gen!Eldorado
JiangminTrojan.Generic.eslij
eGambitUnsafe.AI_Score_93%
AviraTR/Kryptik.vkbas
MAXmalware (ai score=97)
Antiy-AVLTrojan/Win32.Wacatac
ArcabitTrojan.Generic.D202DD94
AhnLab-V3Trojan/Win32.Wacatac.C4083949
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/Ditertag.A
Ad-AwareTrojan.GenericKD.33742228
PandaTrj/GdSda.A
TrendMicro-HouseCallTrojan.MSIL.WACATAC.THDBIBO
RisingTrojan.Fareit!1.A343 (CLOUD)
IkarusTrojan.Win32.Pony
FortinetMSIL/GenKryptik.EJJT!tr
AVGSf:Crypt-AQ [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Generic/HEUR/QVM03.0.E2BA.Malware.Gen

How to remove Sf:Crypt-AQ [Trj]?

Sf:Crypt-AQ [Trj] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment