Categories: Malware

Should I remove “Troj/Criakl-G”?

The Troj/Criakl-G is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Troj/Criakl-G virus can do?

Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Attempts to delete volume shadow copies
Installs itself for autorun at Windows startup
Creates a copy of itself
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Troj/Criakl-G?


File Info:
crc32: 0E9F5AEFmd5: 98db57569da8c50de68fb69002c069cbname: upload_filesha1: 5adf28157d29aae9e0ff25013c0ca084d3fe30c9sha256: e4a43f0bb8216496b95826c2c1aeb2f3ece6a7d87a8dbc7a0cc6a3935ace3d90sha512: bbcb7051ec432c67b9920e727660d1867bf5067b6a98a2feaaf53d7be6c54aeab68082a27bd7747560a456afd72508d1a35500022d04de7da20e8bdc20ce1ff7ssdeep: 1536:mBwl+KXpsqN5vlwWYyhY9S4AUnMlKEqM7u+10IuaFRIx8t6zIrRX9dG:Qw+asqN5aW/hLGMlKEqXINvt6zIrRXWtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Troj/Criakl-G also known as:

Bkav	W32.RansomeDNZ.Trojan
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.3953
MicroWorld-eScan	Trojan.Ransom.Crysis.E
CAT-QuickHeal	Ransom.Crysis.A3
McAfee	Ransom-Dharma!98DB57569DA8
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Crusis.tqMs
K7AntiVirus	Trojan ( 00519f781 )
BitDefender	Trojan.Ransom.Crysis.E
K7GW	Trojan ( 00519f781 )
Cybereason	malicious.69da8c
Arcabit	Trojan.Ransom.Crysis.E
Invincea	ML/PE-A + Troj/Criakl-G
BitDefenderTheta	AI:Packer.D3B9457E1E
Cyren	W32/Trojan.ILHO-9216
Symantec	Ransom.Crysis
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Dharma-6668198-0
Kaspersky	Trojan-Ransom.Win32.Crusis.to
Alibaba	Ransom:Win32/generic.ali2000010
NANO-Antivirus	Trojan.Win32.Filecoder.emdnxn
SUPERAntiSpyware	Ransom.Crysis/Variant
Ad-Aware	Trojan.Ransom.Crysis.E
Emsisoft	Trojan.Ransom.Crysis.E (B)
Comodo	TrojWare.Win32.Crysis.D@6sd9xy
F-Secure	Trojan.TR/Dropper.Gen
TrendMicro	Ransom.Win32.CRYSIS.SM
McAfee-GW-Edition	BehavesLike.Win32.RansomDharma.nc
FireEye	Generic.mg.98db57569da8c50d
Sophos	Troj/Criakl-G
Ikarus	Trojan-Ransom.Crysis
Jiangmin	Trojan.Crypren.ic
MaxSecure	Trojan-Ransom.Win32.Crusis.To
Avira	TR/Dropper.Gen
MAX	malware (ai score=84)
Antiy-AVL	Trojan/Win32.AGeneric
Microsoft	Ransom:Win32/Wadhrama!hoa
ViRobot	Trojan.Win32.Ransom.94720.F
ZoneAlarm	Trojan-Ransom.Win32.Crusis.to
GData	Win32.Trojan-Ransom.VirusEncoder.A
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Crysis.R213980
Acronis	suspicious
ALYac	Trojan.Ransom.Crysis.E
TACHYON	Ransom/W32.crysis.94720
VBA32	TrojanRansom.Crusis
Malwarebytes	Ransom.Crysis
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Filecoder.Crysis.P
TrendMicro-HouseCall	Ransom.Win32.CRYSIS.SM
Rising	Ransom.Crysis!1.A6AA (CLASSIC)
SentinelOne	DFI – Suspicious PE
Fortinet	W32/Crysis.W!tr.ransom
Webroot	W32.Ransom.Gen
AVG	Win32:RansomX-gen [Ransom]
Avast	Win32:RansomX-gen [Ransom]
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Trojan.Ransom.Crusis.A