Malware

Win32/Kryptik.GCSP removal

Malware Removal

The Win32/Kryptik.GCSP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.GCSP virus can do?

  • Unconventionial language used in binary resources: Czech
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Win32/Kryptik.GCSP?


File Info:

crc32: 120197B2
md5: aedc590c9630ace55f69c687a7a597b8
name: AEDC590C9630ACE55F69C687A7A597B8.mlw
sha1: ada640a8e3b3cce109dddcae671f6f05bd958964
sha256: 4fea2af3755800718e7aa07324a23a9cb2bd0d1396ab934bb5d1dd5f78a480fb
sha512: 282346af98460acdb153ba59027f3d7f939aaed80f71e74160379d9aa26e652ea5a70e0164065397fe8f2faa315d626e27d46444d5a8b5e52dc0c15f2f2013c4
ssdeep: 3072:+cCv4zRvgNeCsCpgXJp7rhWoZrVgK8dlEWV1zn4Uqs0vLjx+Zt6AaFRt:Yv4z+BsHJeHlRV1z+s0vGt6Am
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2017, alsnggfb
InternalName: fgghfghjfghj.exe
FileVersion: 1.0.0.1
ProductVersion: 1.0.0.1
Translation: 0x0809 0x04b0

Win32/Kryptik.GCSP also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.BRMon.Gen.1
FireEyeGeneric.mg.aedc590c9630ace5
CAT-QuickHealTrojan.Chapak.ZZ5
ALYacTrojan.BRMon.Gen.1
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.GandCrypt.tphL
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0053305e1 )
BitDefenderTrojan.BRMon.Gen.1
K7GWTrojan ( 0053305e1 )
Cybereasonmalicious.c9630a
BitDefenderThetaGen:NN.ZexaF.34608.ly0@aWvMwmpG
CyrenW32/S-b721ba5c!Eldorado
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.GCSP
APEXMalicious
AvastFileRepMalware
ClamAVWin.Packer.Crypter-6539596-1
KasperskyHEUR:Trojan.Win32.Generic
AlibabaTrojan:Win32/Tofsee.e7a2b262
NANO-AntivirusTrojan.Win32.GandCrypt.exnpjm
ViRobotTrojan.Win32.Agent.182784.T
RisingTrojan.Crypto!8.364 (CLOUD)
Ad-AwareTrojan.BRMon.Gen.1
SophosML/PE-A + Mal/Kryptik-BO
ComodoTrojWare.Win32.Ransom.GandCrab.A@7jk3ar
F-SecureHeuristic.HEUR/AGEN.1103299
DrWebTrojan.Encoder.24465
ZillyaBackdoor.Kasidet.Win32.1670
TrendMicroRansom_HPGANDCRAB.SMG2
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
EmsisoftTrojan.BRMon.Gen.1 (B)
IkarusTrojan.Crypt
AviraHEUR/AGEN.1103299
MAXmalware (ai score=99)
Antiy-AVLTrojan[Ransom]/Win32.GandCrypt
MicrosoftTrojan:Win32/Tofsee.PVJ!MTB
ArcabitTrojan.BRMon.Gen.1
AhnLab-V3Win-Trojan/MalPe34.Suspicious.X2029
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataTrojan.BRMon.Gen.1
CynetMalicious (score: 100)
Acronissuspicious
McAfeePacked-ZG!AEDC590C9630
VBA32BScope.Trojan.Encoder
MalwarebytesTrojan.MalPack
PandaTrj/Genetic.gen
TrendMicro-HouseCallRansom_HPGANDCRAB.SMG2
TencentMalware.Win32.Gencirc.10b548ce
YandexTrojan.GenAsa!XFiUP5s2DWg
SentinelOneStatic AI – Malicious PE
MaxSecureRansomeware.CRAB.gen
FortinetW32/GenKryptik.CNAR!tr
AVGFileRepMalware
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Generic.HwoCURkA

How to remove Win32/Kryptik.GCSP?

Win32/Kryptik.GCSP removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment