Trojan

About “Trojan:Win32/Kryptik” infection

Malware Removal

The Trojan:Win32/Kryptik is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Kryptik virus can do?

  • Creates RWX memory
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan:Win32/Kryptik?


File Info:

crc32: 6B9F468F
md5: 85784111de803adfbb37f35a90f37f35
name: maya.exe
sha1: f2e0f970fef897401518cc75dcfd136fd6839358
sha256: 3c2d36cfbc62b7007efe70ce404acf8458385e50b85d10405e23a21639020182
sha512: 7af13947e2d9c0bf26c6cd7a924f6def112f1717713476d08842ed70722fe8f40814b7aa07da1893c9b275172cfe4d83d1d45ed0dc53627fb91fdac280dd628b
ssdeep: 6144:GDjGRdk0zOYAFvi48tViDv9PiBCLlMS0Qt:GDjwFOYAF6VTiJPiBCLlMSt
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/Kryptik also known as:

BkavW32.MayaFicA.Adware
CMCPorn-Tool.Win32.Agent!O
CAT-QuickHealTrojan.Multi
McAfeeArtemis!85784111DE80
CylanceUnsafe
AegisLabTrojan.Multi.Generic.4!c
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
CyrenW32/Risk.PXTJ-8734
APEXMalicious
ClamAVWin.Trojan.Agent-406049
KasperskyUDS:DangerousObject.Multi.Generic
AlibabaTrojan:Win32/Kryptik.7fa45496
ViRobotTrojan.Win32.A.Inject.244224.E
Endgamemalicious (high confidence)
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_FRS.0NA103GA19
McAfee-GW-EditionBehavesLike.Win32.Dropper.dc
FortinetW32/Generic.AC.2338!tr
Trapminesuspicious.low.ml.score
FireEyeGeneric.mg.85784111de803adf
SophosTroj/PornLnk-B
F-ProtW32/Dropper.AYUZ
MAXmalware (ai score=97)
Antiy-AVLTrojan/Win32.SGeneric
MicrosoftTrojan:Win32/Kryptik
SUPERAntiSpywareTrojan.Agent/Generic
ZoneAlarmUDS:DangerousObject.Multi.Generic
AhnLab-V3Trojan/Win32.Gen.C2686804
VBA32Trojan.Casur
TrendMicro-HouseCallTROJ_FRS.0NA103GA19
RisingTrojan.Casur!8.10E51 (CLOUD)
WebrootW32.Malware.Gen
AVGWin32:Malware-gen
AvastWin32:Malware-gen
Qihoo-360Trojan.Generic

How to remove Trojan:Win32/Kryptik?

Trojan:Win32/Kryptik removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment