Malware

How to remove “Win32/Kryptik.GGIF”?

Malware Removal

The Win32/Kryptik.GGIF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.GGIF virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Collects information about installed applications
  • Anomalous binary characteristics

Related domains:

uxui-qa.ru

How to determine Win32/Kryptik.GGIF?


File Info:

crc32: 96749EF8
md5: f41e0be55b346a52273a7b0a38b21d12
name: F41E0BE55B346A52273A7B0A38B21D12.mlw
sha1: 3a2be6bc344dc320430aed464e77df659c4e532f
sha256: 2375a460d03770639abc64b73a625ce697cfbf5985f8cefdb49a31fefcf05c48
sha512: ecbc945b6b2b5fdc66c635c4c962cbf435e39db00b6948094d656f7c96c01e5c1e6f74d94cac0dbfc2bdd64932a0e4793d52e23b3b34da100f82390bc52e6f60
ssdeep: 98304:Z2ZwWcjGXuj3PqqTbyjIC2o6PW2lQ8rsp1d+YMsz:ZhNBj3bvkD2lpAn
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9Uensi teebhaot
InternalName: AGRAABS.EXE
FileVersion: 2.1.10.10
CompanyName: xa9Uensi teebhaot
ProductName: AGRAABS
ProductVersion: 2.1.10.10
OriginalFilename: agraabs.exe
Translation: 0x0409 0x04e4

Win32/Kryptik.GGIF also known as:

K7AntiVirusTrojan ( 0052fce61 )
Elasticmalicious (high confidence)
DrWebTrojan.Zadved.936
CAT-QuickHealTrojan.Occamy.A2
ALYacGen:Heur.Mint.Zamg.1
ZillyaTrojan.Kryptik.Win32.1414994
K7GWTrojan ( 0052fce61 )
Cybereasonmalicious.55b346
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GGIF
APEXMalicious
AvastFileRepMalware
CynetMalicious (score: 100)
Kasperskynot-a-virus:HEUR:Downloader.Win32.Generic
BitDefenderGen:Heur.Mint.Zamg.1
NANO-AntivirusTrojan.Win32.Kryptik.fbdtky
MicroWorld-eScanGen:Heur.Mint.Zamg.1
Ad-AwareGen:Heur.Mint.Zamg.1
BitDefenderThetaGen:NN.ZexaF.34294.@t0@aa866cki
VIPRETrojan.Win32.Generic!BT
FireEyeGeneric.mg.f41e0be55b346a52
SophosMal/Generic-R + Mal/EncPk-ABL
SentinelOneStatic AI – Malicious PE
JiangminDownloader.Generic.pkq
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Generic.ASMalwS.25FAD14
GDataGen:Heur.Mint.Zamg.1
Acronissuspicious
VBA32suspected of Malware-Cryptor.FSP.gen
MAXmalware (ai score=99)
PandaTrj/GdSda.A
RisingTrojan.Generic@ML.89 (RDML:FVzLuZC8boEBD+51vDNGQA)
YandexTrojan.GenAsa!I58ea0Q9Mfs
IkarusPUA.Win32.Dlhelper
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/Generic
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Win32/Kryptik.GGIF?

Win32/Kryptik.GGIF removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment