Categories: Malware

Win32/Kryptik.DVNN removal instruction

The Win32/Kryptik.DVNN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.DVNN virus can do?

Unconventionial language used in binary resources: Arabic (Qatar)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Detects Sandboxie using a known mutex
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Win32/Kryptik.DVNN?


File Info:
name: 4D8B92367572A2B81AE4.mlwpath: /opt/CAPEv2/storage/binaries/74a680189537c42e2310a3ca8b099cf05596e7add7ebcc84cfceb0ff4d885fc2crc32: DE2B57D3md5: 4d8b92367572a2b81ae469b0188c143csha1: d05e9ab377abbf1d6175d6276896a01a561209d6sha256: 74a680189537c42e2310a3ca8b099cf05596e7add7ebcc84cfceb0ff4d885fc2sha512: 8383fd557251808df1fda42fdc9d57ba40b4a83796fc5e40fd7a298dc8db188611ce2b4d3d277d92cbecb2e04002eba1cfa8a6046bfe79829b89acf2e38acef4ssdeep: 768:2zdV6ElDm/vKPWB9V7n9XEWVd40g4g5I41VnIj:2r6MPaJ0ke0gXIzjtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T191F29E0EEFE64A64F6F309B2197895A389BF3C623F50B09FA74009451EB19C595B4B33sha3_384: 86ad1a135585bddb6572e8bb0173eee7de63b7afbeffd7717f20e46ca614d454905edb951e60e13fba3e10111a2ad65fep_bytes: 558bec83e4f8b80c140000e89b0b0000timestamp: 2015-06-30 09:27:14
Version Info:
CompanyName: UG NorthFileDescription: Virtual Driver KitFileVersion: 3648.5.52.94InternalName: vdk.exeLegalCopyright: Copyright (C) 2013 - 2015 VDKOriginalFilename: stub.exeProductName: VDKProductVersion: 6000.9749.3422.1Translation: 0x0409 0x04b0

Win32/Kryptik.DVNN also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Androm.tnLR
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.68854194
FireEye	Generic.mg.4d8b92367572a2b8
CAT-QuickHeal	Trojan.Bunitu.19938
ALYac	Trojan.GenericKD.68854194
Malwarebytes	Generic.Malware/Suspicious
Zillya	Trojan.Kryptik.Win32.796822
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0055dd191 )
Alibaba	Backdoor:Win32/Androm.8191ac52
K7GW	Trojan ( 0055dd191 )
Cybereason	malicious.67572a
BitDefenderTheta	Gen:NN.ZexaF.36350.cm0@a4eRBHpQ
VirIT	Trojan.Win32.Proxy.BHYQ
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Kryptik.DVNN
TrendMicro-HouseCall	TROJ_GEN.R002C0DHL23
Cynet	Malicious (score: 100)
Kaspersky	Backdoor.Win32.Androm.mqcb
BitDefender	Trojan.GenericKD.68854194
NANO-Antivirus	Trojan.Win32.Generic.dwqynl
Avast	Win32:Trojan-gen
Tencent	Win32.Backdoor.Androm.Mqil
Emsisoft	Trojan.GenericKD.68854194 (B)
VIPRE	Trojan.GenericKD.68854194
TrendMicro	TROJ_GEN.R002C0DHL23
McAfee-GW-Edition	BehavesLike.Win32.Upatre.nc
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan-Proxy.Agent
Webroot	Trojan.Dropper.Gen
Avira	HEUR/AGEN.1321038
MAX	malware (ai score=100)
Antiy-AVL	Trojan[Backdoor]/Win32.Androm
Xcitium	Malware@#2xqugrfeukgpb
Microsoft	Trojan:Win32/Bagsu!rfn
ZoneAlarm	Backdoor.Win32.Androm.mqcb
GData	Trojan.GenericKD.68854194
AhnLab-V3	Backdoor/Win.Androm.R599946
McAfee	GenericR-EMJ!4D8B92367572
TACHYON	Backdoor/W32.Androm.37376.D
VBA32	BScope.Backdoor.Androm
Cylance	unsafe
Panda	Trj/Genetic.gen
APEX	Malicious
Rising	Malware.Undefined!8.C (TFE:1:3AShbCluAAH)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.1728101.susgen
Fortinet	W32/Generic.AP.40680
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)