Trojan

Trojan.Agent.Cryptos removal tips

Malware Removal

The Trojan.Agent.Cryptos is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.Cryptos virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Trojan.Agent.Cryptos?


File Info:

crc32: 2B11AC0C
md5: 9c3f3f662b28812769580559b5445a91
name: aqu.exe
sha1: 6d98c72448001021f8df4c25583710b8ef5f3639
sha256: cce25d643289f6facd576ded974bc0901c0f467d9f42faba141fa75c3bdcafeb
sha512: 22e212d85965bcd7ee5d67601e40cbbd9ad070b26a37eda84a98945aedeb2e20a7985df4b14fdede333038642d67ad99f13cb9a7c7338b666e360bf45d1b3705
ssdeep: 12288:StBUJafYuyM8lGJOmafYutRZtl8qfCPYTEkttgrzLfFPCZbIsogrVIG0m+iTy+1:StBsPAOJll/6PYAdrzb0ogRIlBiOwaS
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2018
Assembly Version: 1.0.0.0
InternalName: GameGUI.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: GameGUI
ProductVersion: 1.0.0.0
FileDescription: GameGUI
OriginalFilename: GameGUI.exe

Trojan.Agent.Cryptos also known as:

MicroWorld-eScanTrojan.GenericKD.42578877
FireEyeGeneric.mg.9c3f3f662b288127
McAfeeRDN/Generic PWS.y
AegisLabTrojan.MSIL.Cryptos.4!c
SangforMalware
K7AntiVirusTrojan ( 0056081e1 )
BitDefenderTrojan.GenericKD.42578877
K7GWTrojan ( 0056081e1 )
Cybereasonmalicious.448001
TrendMicroTrojan.MSIL.MALREP.THBACBO
BitDefenderThetaGen:NN.ZemsilF.34090.Um0@aGuO3nl
CyrenW32/MSIL_Kryptik.KH.gen!Eldorado
SymantecTrojan.Gen.2
TrendMicro-HouseCallTrojan.MSIL.MALREP.THBACBO
Paloaltogeneric.ml
GDataTrojan.GenericKD.42578877
KasperskyHEUR:Trojan.MSIL.Cryptos.gen
AlibabaTrojan:Win32/starter.ali1000139
NANO-AntivirusTrojan.Win32.Kryptik.hannwj
ViRobotTrojan.Win32.S.Agent.760320.R
RisingTrojan.GenKryptik!8.AA55 (CLOUD)
Ad-AwareTrojan.GenericKD.42578877
SophosMal/Generic-S
ComodoMalware@#2tuufyosptjo3
F-SecureTrojan.TR/Kryptik.elxgf
DrWebTrojan.Siggen9.11286
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.bc
SentinelOneDFI – Malicious PE
Trapminemalicious.high.ml.score
EmsisoftTrojan.GenericKD.42578877 (B)
APEXMalicious
F-ProtW32/MSIL_Kryptik.KH.gen!Eldorado
MaxSecureTrojan.Malware.300983.susgen
AviraTR/Kryptik.elxgf
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D289B3BD
ZoneAlarmHEUR:Trojan.MSIL.Cryptos.gen
MicrosoftTrojan:Win32/Occamy.C
AhnLab-V3Trojan/Win32.MSIL.R325903
ALYacTrojan.Agent.Cryptos
MAXmalware (ai score=81)
MalwarebytesSpyware.InfoStealer
ESET-NOD32a variant of MSIL/Kryptik.UQT
IkarusTrojan-Spy.Keylogger.AgentTesla
eGambitUnsafe.AI_Score_100%
FortinetMSIL/GenKryptik.EDWS!tr
WebrootW32.Trojan.MSIL.Cryptos
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360Generic/Trojan.efb

How to remove Trojan.Agent.Cryptos?

Trojan.Agent.Cryptos removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment