Win32/Kryptik.GGFU removal tips

The Win32/Kryptik.GGFU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.GGFU virus can do?

Executable code extraction
Creates RWX memory
Installs itself for autorun at Windows startup
Attempts to identify installed AV products by registry key
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Kryptik.GGFU?


File Info:
crc32: 0A0262F4
md5: 96b8990c47d25bf3d1f1cd79994b009f
name: 96B8990C47D25BF3D1F1CD79994B009F.mlw
sha1: bbc5a98ecb0656690c7cbdd27053e58436bc399c
sha256: 1e0808e3ac6ca20181f43e389cd85c4b9a8a88b7cb32c5c888f3d0750358762e
sha512: c8611ca90126ec4ed22629da943eecea8ea3d90debe55dec77ce221f28ac1d06051eacf708068591bdcfb972323d53854b32834bf7be6e3455f1ee4c1a9474e5
ssdeep: 6144:URxEEKV29rtMuaD/LaHrtpoShl+bPYjtaZqOUW7+Ezi022v1ZBTyLT233q7UmTl:UB9sLQwShoscPJewtZ9yW330KZNR
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: (C)Qihu 360 Software Co., Ltd. All rights reserved.
InternalName: 360TSLiveUpd.exe
FileVersion: 9,0,0,1000
CompanyName: QIHU 360 SOFTWARE CO. LIMITED
ProductName: 360 Total Security
ProductVersion: 9,0,0,1000
FileDescription: 360 ipdate Module
OriginalFilename: TSLiveUpd.exe
Translation: 0x0409 0x04b0

Win32/Kryptik.GGFU also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0052f4861 )
Lionic	Trojan.Win32.Yakes.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen7.52159
Cynet	Malicious (score: 100)
ALYac	Trojan.Mint.Zamg.O
Cylance	Unsafe
Zillya	Trojan.Yakes.Win32.68449
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Trojan ( 0052f4861 )
Cybereason	malicious.c47d25
Symantec	Packed.Generic.459
ESET-NOD32	a variant of Win32/Kryptik.GGFU
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Cype-7077783-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.Mint.Zamg.O
NANO-Antivirus	Trojan.Win32.Bunitu.fawtsk
MicroWorld-eScan	Trojan.Mint.Zamg.O
Tencent	Malware.Win32.Gencirc.10ba591d
Ad-Aware	Trojan.Mint.Zamg.O
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.Yakes.FN@7ngy6d
F-Secure	Heuristic.HEUR/AGEN.1109183
BitDefenderTheta	Gen:NN.ZexaF.34266.Mq0@a8xcFJbi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TrojanSpy.Win32.TRICKBOT.SMB.hp
McAfee-GW-Edition	BehavesLike.Win32.Ransomware.jh
FireEye	Generic.mg.96b8990c47d25bf3
Emsisoft	Trojan.Mint.Zamg.O (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Yakes.zou
Webroot	W32.Rogue.Gen
Avira	HEUR/AGEN.1109183
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	Trojan/Generic.ASMalwS.25F4E95
Microsoft	TrojanDropper:Win32/Bunitu.G
GData	Trojan.Mint.Zamg.O
AhnLab-V3	Malware/Win32.Generic.R249169
Acronis	suspicious
McAfee	Packed-FEE!96B8990C47D2
MAX	malware (ai score=97)
VBA32	BScope.Trojan.Yakes
Malwarebytes	Malware.AI.4031647231
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TrojanSpy.Win32.TRICKBOT.SMB.hp
Rising	Ransom.Locky!1.AE2E (CLASSIC)
Yandex	Trojan.Yakes!gnMi8NSADT4
Ikarus	Trojan.Win32.Krypt
Fortinet	W32/Kryptik.GWSH!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Win32/Kryptik.GGFU?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Kryptik.GGFU removal tips