Malware

Win32/Kryptik.GCRY removal tips

Malware Removal

The Win32/Kryptik.GCRY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.GCRY virus can do?

  • Unconventionial language used in binary resources: Czech
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Win32/Kryptik.GCRY?


File Info:

crc32: 03E0ED92
md5: e69a7cd5a6ab2eac6d039daaafbf69fa
name: E69A7CD5A6AB2EAC6D039DAAAFBF69FA.mlw
sha1: 84f55126290e9f239f1858750b1af81ff0d7cffd
sha256: 0ef6574dce807b61ba0a413443b225be459c9f378c4285d28c1af1d26ceada5c
sha512: 6051e08c5d9f9765157367a77007ece659b3a2fdf1ef1d890e6c08b6d4bf113e3235ee5653955043f5aa842872572054440f327f60d8899bb7169b8b49724b02
ssdeep: 3072:/hRzEAf+PgJvvhdcG+YRaRVEWNZLs9IYP0P/meb+DFbkMdGKBjQYzgPe0:JygJBD+lRQ/i/meiDtx9Ke0
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Kryptik.GCRY also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0053305e1 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.24454
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacTrojan.BRMon.Gen.1
CylanceUnsafe
ZillyaTrojan.GandCrypt.Win32.15
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaRansom:Win32/GandCrypt.9ecc9a07
K7GWTrojan ( 0053305e1 )
Cybereasonmalicious.5a6ab2
CyrenW32/S-7a4ad47a!Eldorado
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.GCRY
APEXMalicious
AvastFileRepMalware
ClamAVWin.Packer.Crypter-6539596-1
KasperskyTrojan-Ransom.Win32.GandCrypt.ap
BitDefenderTrojan.BRMon.Gen.1
NANO-AntivirusTrojan.Win32.Godzilla.exmlwu
SUPERAntiSpywareRansom.Filecoder/Variant
MicroWorld-eScanTrojan.BRMon.Gen.1
TencentMalware.Win32.Gencirc.10b54a76
Ad-AwareTrojan.BRMon.Gen.1
SophosMal/Generic-R + Mal/Kryptik-BP
ComodoTrojWare.Win32.Ransom.GandCrab.A@7jk3ar
BitDefenderThetaGen:NN.ZexaF.34686.jyW@aifsA7gG
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_HPGANDCRAB.SMG2
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
FireEyeGeneric.mg.e69a7cd5a6ab2eac
EmsisoftTrojan.BRMon.Gen.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanDownloader.Agent.fmbi
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1103299
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Win32.TSGeneric
MicrosoftVirTool:Win32/Obfuscator.CAP
ArcabitTrojan.BRMon.Gen.1
AegisLabTrojan.Multi.Generic.4!c
GDataTrojan.BRMon.Gen.1
AhnLab-V3Win-Trojan/MalPe36.Suspicious.X2037
Acronissuspicious
McAfeePacked-ZG!E69A7CD5A6AB
MAXmalware (ai score=95)
VBA32Trojan.Agentb
MalwarebytesSpyware.PasswordStealer
PandaTrj/Genetic.gen
TrendMicro-HouseCallRansom_HPGANDCRAB.SMG2
RisingMalware.Obscure/Heur!1.9E03 (CLOUD)
IkarusTrojan.Win32.Krypt
MaxSecureRansomeware.CRAB.gen
FortinetW32/GenKryptik.CNAR!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Win32/Kryptik.GCRY?

Win32/Kryptik.GCRY removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment