Categories: Malware

Should I remove “Win32/Kryptik.DMNS”?

The Win32/Kryptik.DMNS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.DMNS virus can do?

Performs HTTP requests potentially not found in PCAP.
Reads data out of its own binary image
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Attempts to modify proxy settings
Creates a copy of itself

How to determine Win32/Kryptik.DMNS?


File Info:
name: AA8979D2984B82F3E010.mlwpath: /opt/CAPEv2/storage/binaries/886f4d511ab158adf8d5dfab2151734c4c695fef93a041424c2de485142497c8crc32: 084D15BBmd5: aa8979d2984b82f3e01079fa3ea72255sha1: 39d2fed540e43f0b931b65129d547456ff741324sha256: 886f4d511ab158adf8d5dfab2151734c4c695fef93a041424c2de485142497c8sha512: 5c1dbff497a909d29b0e106bbc44ba0642c923551c28fbe6f9cffb1478b45b9858f7d1acaa8f1533011553605d5eb5cdaf26f55bf4b5fb566ceac46b700345e7ssdeep: 1536:9rB4T0rFoZ7uguDUZyyOkkv+ypsnV8D3X:/vmZmDpv+yx3type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C0434B11B490C072CC0646B45435CAA6865FBE219EB0E4877FAC3A6E6F733C1573A36Asha3_384: 7982c782778b8ebadc39e83d809a20631efee3ed2db8e7ef1962007cb9b8f37bc7e85f139a2dc9d0483158d1c4c31494ep_bytes: e806ebffffe9ac3300008bff558becfftimestamp: 2013-05-05 20:35:34
Version Info:
0: [No Data]

Win32/Kryptik.DMNS also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Upatre.a!c
tehtris	Generic.Malware
MicroWorld-eScan	Trojan.Upatre.Gen.3
CAT-QuickHeal	Trojan.Kadena.B4
ALYac	Trojan.Upatre.Gen.3
Malwarebytes	Crypt.Trojan.Malicious.DDS
VIPRE	Trojan.Upatre.Gen.3
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 004c75411 )
Alibaba	TrojanDownloader:Win32/Upatre.25c98b5a
K7GW	Trojan ( 004c75411 )
Cybereason	malicious.2984b8
Baidu	Win32.Trojan.Kryptik.ju
VirIT	Trojan.Win32.Crypt4.AWSW
Cyren	W32/Upatre.AU.gen!Eldorado
Symantec	Downloader.Upatre!gen5
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.DMNS
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.Upatre.Gen.3
NANO-Antivirus	Trojan.Win32.Upatre.dtcnsw
SUPERAntiSpyware	Trojan.Agent/Gen-Upatre
Avast	Win32:Evo-gen [Trj]
Tencent	Win32.Trojan.Generic.Majl
Emsisoft	Trojan.Upatre.Gen.3 (B)
F-Secure	Trojan.TR/Kryptik.abboik
DrWeb	Trojan.Upatre.3804
Zillya	Downloader.UpatreGen.Win32.33
TrendMicro	TROJ_UPATRE.SMJV2
McAfee-GW-Edition	BehavesLike.Win32.Upatre.qh
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.aa8979d2984b82f3
Sophos	Troj/Dyreza-FV
GData	Trojan.Upatre.Gen.3
Jiangmin	TrojanDownloader.Upatre.adig
Google	Detected
Avira	TR/Kryptik.abboik
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Win32.AGeneric
Xcitium	TrojWare.Win32.TrojanDownloader.Upatre.KMJ@5s5qya
Arcabit	Trojan.Upatre.Gen.3
ViRobot	Trojan.Win32.Upatre.59392.Y
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	TrojanDownloader:Win32/Upatre.BL
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Upatre.R153690
McAfee	Upatre-FACM!AA8979D2984B
VBA32	BScope.Trojan.Downloader
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_UPATRE.SMJV2
Rising	Downloader.Upatre!8.B5 (TFE:5:J8nRVASQBjU)
Yandex	Trojan.DL.Upatre!c1wqyMycMmM
Ikarus	Trojan.Win32.Crypt
Fortinet	W32/Waski.A!tr
BitDefenderTheta	Gen:NN.ZexaF.36318.dqW@aSm!ivci
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (W)