Trojan.Win32.VBKrypt.gkqk malicious file

The Trojan.Win32.VBKrypt.gkqk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.VBKrypt.gkqk virus can do?

Authenticode signature is invalid

How to determine Trojan.Win32.VBKrypt.gkqk?


File Info:
name: B80E90AB96B20C106E08.mlw
path: /opt/CAPEv2/storage/binaries/0ce638ac6ffd12ff88a9c4b50593e9d8381c877917cf898732a3086986ee5d5f
crc32: 945EC581
md5: b80e90ab96b20c106e08e1d6e4aa6497
sha1: a6a36a9b17c20b387125b60f3c5fb526819593b5
sha256: 0ce638ac6ffd12ff88a9c4b50593e9d8381c877917cf898732a3086986ee5d5f
sha512: 84545b74a8f6ab227f007e4c9dd49385651fbc7640fbfc2033930b40fefe20e68d526eac639fe69ef57e5ccda73edb7cd3199648e26fe4d37c2a4a182a5c58eb
ssdeep: 768:lR2bcEAg5Wgnl/HINTmKe9SNrpTg53enLF+1:DxgnlfIRJYenLF+1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EDE2B5123FD1F9BAC124C7F9AD9903B060239C3026D29D03BA464FA6B775D57AA2174F
sha3_384: 4954168a5b49afbddd133a36d68e227ae230ffa5f7209ceed6f5185cf9a9211fc27d3183406fa52224e63469997eff2b
ep_bytes: 68bc344000e8f0ffffff000000000000
timestamp: 2008-06-27 10:51:52

Version Info:
0: [No Data]

Trojan.Win32.VBKrypt.gkqk also known as:

Bkav	W32.AIDetect.malware1
FireEye	Generic.mg.b80e90ab96b20c10
McAfee	GenericRXJO-DK!B80E90AB96B2
Cybereason	malicious.b96b20
Cyren	W32/Damaged_File.E.gen!Eldorado
Symantec	W32.Changeup
APEX	Malicious
ClamAV	Win.Trojan.Changeup-6169544-0
Kaspersky	Trojan.Win32.VBKrypt.gkqk
NANO-Antivirus	Trojan.Win32.VBKrypt.etcoes
Avast	Win32:VB-ABDC [Drp]
DrWeb	Trojan.VbCrypt.60
VIPRE	LooksLike.Win32.Malware!vb (v)
McAfee-GW-Edition	BehavesLike.Win32.Duptwux.nm
Sophos	Mal/Generic-S
Avira	WORM/Vobus.N.1
Microsoft	Trojan:Win32/Woreflint.A!cl
ZoneAlarm	Trojan.Win32.VBKrypt.gkqk
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Jorik.C89468
Malwarebytes	Malware.AI.907131517
Rising	Trojan.Occamy!8.F1CD (TFE:3:xoP29cdurKE)
Yandex	Trojan.VBGent.Gen.579
SentinelOne	Static AI – Malicious PE
Fortinet	W32/PossibleThreat
AVG	Win32:VB-ABDC [Drp]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Trojan.Win32.VBKrypt.gkqk?

Trojan.Win32.VBKrypt.gkqk removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X