Categories: Malware

Win32/Kryptik.BAXK removal

The Win32/Kryptik.BAXK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.BAXK virus can do?

Behavioural detection: Executable code extraction – unpacking
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Win32/Kryptik.BAXK?


File Info:
name: CCC6C875612687DD93D9.mlwpath: /opt/CAPEv2/storage/binaries/fb5805a0cef57fab78aa2560e74547f592a57e151b02adc96f8c4405064eacd9crc32: ECCE61A3md5: ccc6c875612687dd93d97dd9d5637ab6sha1: 11741acacf6a3fd0c04702e29cb08fb8fe9449a9sha256: fb5805a0cef57fab78aa2560e74547f592a57e151b02adc96f8c4405064eacd9sha512: 6fa7cfef19b9384a70b9afefa201bfe188091917155af3a48fc3a7e53e237b7a883eb71e730773176fba17495a840dcccd2d2a6c6a2857cd307db83be0aaaa47ssdeep: 3072:jcAf4wuIkWOKyWLrGbu8CtbFYK9CD+FePuv0BVDhcL4LpBKUcWW6+Vpnv6EQPGp/:gAAw1k2rGbufg1iEnts4dg7VpnvQlmitype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1F83412189AF04A52D4A316B12673B3538EBEAD605CA4E19382543DBF0FB1CC05A3E777sha3_384: 1d965b08a9cbc84e34f61774008924b0c43f98e4a03853ead464a6ce3da6c4ffe811d7d7d42d77f00e8c42fd6730db29ep_bytes: 558bec6aff68d070430068104c430064timestamp: 2013-06-25 10:01:33
Version Info:
CompanyName: Adobe Systems IncorporatedFileDescription: Kernel DLLFileVersion: 9.3.0.113InternalName: TFKERNELLegalCopyright: Copyright 2006-2010 Adobe Systems Incorporated and its licensors. All rights reserved.OriginalFilename: TFKERNEL.dllProductName: KernelProductVersion: 9.3.0.113Translation: 0x0409 0x04b0

Win32/Kryptik.BAXK also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Heur.FKP.15
FireEye	Generic.mg.ccc6c875612687dd
CAT-QuickHeal	Trojanpws.Zbot.28429
McAfee	PWS-Zbot-FBFJ!CCC6C8756126
Sangfor	Infostealer.Win32.Zbot.V026
K7AntiVirus	Trojan ( 004373101 )
Alibaba	TrojanSpy:Win32/Kryptik.c69c6ce3
K7GW	Trojan ( 004373101 )
Cybereason	malicious.561268
VirIT	Trojan.Win32.SHeur4.BLZN
Cyren	W32/Zbot.LE.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.BAXK
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Spy.Win32.Zbot.mqtz
BitDefender	Gen:Heur.FKP.15
NANO-Antivirus	Trojan.Win32.Zbot.crkyqs
Avast	Win32:Evo-gen [Trj]
Tencent	Malware.Win32.Gencirc.114c4700
Emsisoft	Gen:Heur.FKP.15 (B)
F-Secure	Heuristic.HEUR/AGEN.1347341
DrWeb	Trojan.PWS.Panda.2401
VIPRE	Gen:Heur.FKP.15
TrendMicro	TROJ_GEN.R002C0CBB23
McAfee-GW-Edition	PWS-Zbot-FBFJ!CCC6C8756126
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan-Spy.Win32.Zbot
GData	Gen:Heur.FKP.15
Jiangmin	TrojanSpy.Zbot.ehsp
Avira	HEUR/AGEN.1347341
MAX	malware (ai score=80)
Antiy-AVL	Trojan[Spy]/Win32.Zbot
Xcitium	TrojWare.Win32.Zbot.MQTZ@4yy4wv
Arcabit	Trojan.FKP.15
ZoneAlarm	Trojan-Spy.Win32.Zbot.mqtz
Microsoft	PWS:Win32/Zbot
Google	Detected
AhnLab-V3	Spyware/Win32.Zbot.C171015
BitDefenderTheta	Gen:NN.ZexaF.36196.oq0@a8cKiIli
ALYac	Gen:Heur.FKP.15
TACHYON	Trojan-Spy/W32.ZBot.232448.AI
VBA32	BScope.TrojanSpy.Zbot
Cylance	unsafe
Panda	Trj/Dtcontx.F
TrendMicro-HouseCall	TROJ_GEN.R002C0CBB23
Rising	Stealer.Zbot!8.109D7 (TFE:5:cUay28aZ32N)
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/ZAccess.Y!tr
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)