Categories: Malware

Win32/Kryptik.CEKL removal guide

The Win32/Kryptik.CEKL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.CEKL virus can do?

Executable code extraction
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
Reads data out of its own binary image
Detects Sandboxie through the presence of a library
Attempts to identify installed analysis tools by a known file location
Detects the presence of Wine emulator via registry key
Detects VirtualBox through the presence of a device
Detects VMware through the presence of a device
Checks for a known DeepFreeze Frozen State Mutex
Collects information to fingerprint the system
Anomalous binary characteristics

How to determine Win32/Kryptik.CEKL?


File Info:
crc32: 5F366259md5: 4fd481f4b0198366f3ca718a683fc9a6name: 4FD481F4B0198366F3CA718A683FC9A6.mlwsha1: e9100a6ef4af17ca2320e630320f78ef5064ff8dsha256: 96a7e20b68efc19d99b296cb509e41235dcdf33db36b06222309a93ea42fce02sha512: 8e2c1acaae706ffcc9130c0702fbcd926cf7e96c171479e222a66735a64ee08db356a6b8c2e4334897adfd247548cfa34ebc554f8e4f410c53dbe130fde6e091ssdeep: 6144:G8+RSlbWkcmLJe4S7TA9R1HuW4II7FZZo:G8+RSlbWDmle4S7TA9HrOhUtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Kryptik.CEKL also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0049bcf41 )
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Panda.1915
Cynet	Malicious (score: 100)
ALYac	Trojan.Ransom.Cerber.1
Cylance	Unsafe
Zillya	Trojan.Zbot.Win32.161930
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 0049bcf41 )
Cybereason	malicious.4b0198
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.CEKL
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.Ransom.Cerber.1
NANO-Antivirus	Trojan.Win32.Zbot.dbetcx
MicroWorld-eScan	Trojan.Ransom.Cerber.1
Tencent	Malware.Win32.Gencirc.114c4173
Ad-Aware	Trojan.Ransom.Cerber.1
Sophos	Mal/Generic-S + Troj/Hancitor-M
BitDefenderTheta	Gen:NN.ZexaF.34686.tqX@aGhliSB
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Emotet.fm
FireEye	Generic.mg.4fd481f4b0198366
Emsisoft	Trojan.Ransom.Cerber.1 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Generic.bbdjo
Webroot	W32.Malware.Gen
Avira	HEUR/AGEN.1116501
Microsoft	PWS:Win32/Zbot
Arcabit	Trojan.Ransom.Cerber.1
AegisLab	Trojan.Win32.Generic.4!c
GData	Trojan.Ransom.Cerber.1
TACHYON	Trojan-Spy/W32.ZBot.313856.CH
AhnLab-V3	Malware/Win32.Zbot.R113027
McAfee	PWSZbot-FABA!4FD481F4B019
MAX	malware (ai score=99)
VBA32	TrojanSpy.Zbot
Malwarebytes	MachineLearning/Anomalous.94%
Panda	Generic Malware
Rising	Spyware.Zbot!8.16B (CLOUD)
Yandex	TrojanSpy.Zbot!KGlSUdM00hc
Ikarus	Trojan-Spy.Win32.Zbot
Fortinet	W32/Generic.AP.91CD0!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml