Malware

What is “Win32/Kryptik.CGVS”?

Malware Removal

The Win32/Kryptik.CGVS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.CGVS virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Win32/Kryptik.CGVS?


File Info:

crc32: BCC96164
md5: 02c2b0c0882f677e073990cf908c5199
name: 02C2B0C0882F677E073990CF908C5199.mlw
sha1: 352464b5698a4792b9461d62017059f7c88165d8
sha256: de5f29d8f9b74e2b5ffb1ad416fac142500dab074b767efc00f6b162edeeef04
sha512: b49d9cf70c59c8b83e620356e2fc144084fb5697a99803adcb5159f95a087bf30a688f8e00576efc42ba2b026a8ec1220383ce1c60f61cc9f8da4dfeb0f1bad3
ssdeep: 12288:ZPgynpnL7WWuhBwmSxDRHdvaw66o2IXEOkiyje0YkIZudkj:ZPTnL7mjS5WwTjwEO5cRYBZuKj
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Kryptik.CGVS also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.454806
FireEyeGeneric.mg.02c2b0c0882f677e
McAfeeGenericATG-FAAD!02C2B0C0882F
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 004c92e31 )
BitDefenderGen:Variant.Razy.454806
K7GWTrojan ( 004c92e31 )
CrowdStrikewin/malicious_confidence_100% (D)
BaiduWin32.Trojan.Kryptik.aak
CyrenW32/S-e3ab41a4!Eldorado
SymantecPacked.Generic.508
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Packer.Hyperion-1
KasperskyPacked.Win32.Agent.n
NANO-AntivirusTrojan.Win32.Kryptik.esoguk
AegisLabHacktool.Win32.Agent.x!c
Ad-AwareGen:Variant.Razy.454806
SophosML/PE-A + Troj/Swrort-O
ComodoTrojWare.Win32.Kryptik.ALKC@4qvska
DrWebTrojan.DownLoader25.31175
McAfee-GW-EditionBehavesLike.Win32.Generic.hc
EmsisoftGen:Variant.Razy.454806 (B)
SentinelOneStatic AI – Malicious PE
JiangminPacked.Agent.avj
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan[Packed]/Win32.Agent
KingsoftWin32.Troj.Agent.n.(kcloud)
MicrosoftTrojanDownloader:Win32/Banload
ArcabitTrojan.Razy.D6F096
ZoneAlarmPacked.Win32.Agent.n
GDataGen:Variant.Razy.454806
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Generic.C216885
Acronissuspicious
BitDefenderThetaAI:Packer.955EEBC91E
ALYacGen:Variant.Razy.454806
VBA32TrojanDownloader.Banload
MalwarebytesBanload.Trojan.Downloader.DDS
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Kryptik.CGVS
RisingDownloader.Waski!8.184 (TFE:3:hg4uYaRqhIN)
YandexTrojan.Kryptik!6XHeHUBgAyE
MAXmalware (ai score=83)
eGambitUnsafe.AI_Score_97%
FortinetW32/Kryptik.CGVS!tr
AVGWin32:Malware-gen
Cybereasonmalicious.0882f6
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.97a

How to remove Win32/Kryptik.CGVS?

Win32/Kryptik.CGVS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment