Trojan:Win64/Icedidcrypt.GK!MTB removal tips

The Trojan:Win64/Icedidcrypt.GK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win64/Icedidcrypt.GK!MTB virus can do?

Anomalous binary characteristics

How to determine Trojan:Win64/Icedidcrypt.GK!MTB?


File Info:
crc32: C0303DDE
md5: cff667f7cc386481e1083c98a625848a
name: CFF667F7CC386481E1083C98A625848A.mlw
sha1: 299d91974d842ebf371085889d7ab3a3b6dd6d17
sha256: 48878e6ae9aad7bca993b41cfa36351ae853ec3a59683bcb0ed5accf7c595202
sha512: 26efe6b2cc5b138b5b05aede33c81933f8610884bf892976bfc8a0050975d6c5a7a14688a6e3a9baa8c7d25d5289317ecf6180216e4dd4a77569ba1526c60b8b
ssdeep: 768:Pn8Sg0+bpDPQPqxBtfQqxonY1rCsxPbEBJHVpEyVfkgAv36HAV1Mb7nTaHx:kDtEQBaQoSPIB5evK6qbnaR
type: PE32+ executable (DLL) (GUI) x86-64, for MS Windows

Version Info:
0: [No Data]

Trojan:Win64/Icedidcrypt.GK!MTB also known as:

Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.865931
K7GW	Trojan ( 0057bbe71 )
K7AntiVirus	Trojan ( 0057bbe71 )
Cyren	W64/Trojan2.QNVY
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/GenKryptik.FESU
Avast	Win64:BankerX-gen [Trj]
Kaspersky	UDS:Trojan.Win32.Ligooc
BitDefender	Gen:Variant.Razy.865931
MicroWorld-eScan	Gen:Variant.Razy.865931
Ad-Aware	Gen:Variant.Razy.865931
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Trojan-FTOE!CFF667F7CC38
FireEye	Gen:Variant.Razy.865931
Emsisoft	Gen:Variant.Razy.865931 (B)
Avira	TR/Crypt.Agent.fqmli
Microsoft	Trojan:Win64/Icedidcrypt.GK!MTB
GData	Gen:Variant.Razy.865931
AhnLab-V3	Trojan/Win.Generic.R418714
McAfee	Trojan-FTOE!CFF667F7CC38
MAX	malware (ai score=87)
Malwarebytes	Trojan.Crypt
Rising	Trojan.GenKryptik!8.AA55 (TFE:dGZlOgW+kbcQB42Nvg)
Ikarus	Win32.Outbreak
MaxSecure	Trojan.Malware.117454512.susgen
Fortinet	W64/GenKryptik.FESU!tr
AVG	Win64:BankerX-gen [Trj]

How to remove Trojan:Win64/Icedidcrypt.GK!MTB?

Trojan:Win64/Icedidcrypt.GK!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X