What is "Win32/Kryptik.GHON"?

The Win32/Kryptik.GHON is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.GHON virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Kryptik.GHON?


File Info:
crc32: 95531862
md5: 94e07ad0ae7634cc3ecc2b5ee96bcee3
name: 94E07AD0AE7634CC3ECC2B5EE96BCEE3.mlw
sha1: ac4245732ac5c4ff46f027e0f8c12cc1cf879c54
sha256: 9f7d8047f7d5b2345cbc79c86407c4174111913b03901227e33ff5cd020842b7
sha512: de7620852f3fe78f588c611bf17cb7dfcd069b72b085ee404b55f57933e2376213326e8480721952544c44a995da982992428b3bc86d9917d8c41e0a20967b1e
ssdeep: 12288:itgVu04H7AGijwTWhzXRmVp//TLLbL1kK:i+Vu3H8GWjRy57bRj
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: Copyright xa9.  All rights reserved. DzSoft Ltd (www.dzsoft.com)
InternalName: Inline Elevatin
FileVersion: 6.4.3.5
CompanyName: DzSoft Ltd (www.dzsoft.com)
PrivateBuild: 6.4.3.5
LegalTrademarks: Copyright xa9.  All rights reserved. DzSoft Ltd (www.dzsoft.com)
Comments: Mastering Diagnostic Architecture Broken
ProductName: Inline Elevatin
Languages: English
ProductVersion: 6.4.3.5
FileDescription: Mastering Diagnostic Architecture Broken
OriginalFilename: Inline Elevatin.exe
Translation: 0x0409 0x04b0

Win32/Kryptik.GHON also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0056e98f1 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ransom.Scarab.43
Cylance	Unsafe
Sangfor	Ransom.Win32.Scarab.43
K7GW	Trojan ( 0056e98f1 )
Cybereason	malicious.0ae763
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.GHON
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Spy.Win32.Panda.bax
BitDefender	Gen:Variant.Ransom.Scarab.43
NANO-Antivirus	Trojan.Win32.Panda.fdwtsm
MicroWorld-eScan	Gen:Variant.Ransom.Scarab.43
Ad-Aware	Gen:Variant.Ransom.Scarab.43
Comodo	Packed.Win32.MUPX.Gen@24tbus
BitDefenderTheta	Gen:NN.ZexaF.34690.ymKfau@@3khi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Trojan.fc
FireEye	Generic.mg.94e07ad0ae7634cc
Emsisoft	Gen:Variant.Ransom.Scarab.43 (B)
Webroot	W32.Malware.Gen
Avira	TR/AD.PandaBanker.xbdsa
Microsoft	Trojan:Win32/Skeeyah.A!rfn
AegisLab	Trojan.Win32.Generic.4!c
GData	Gen:Variant.Ransom.Scarab.43
AhnLab-V3	Malware/Win32.Generic.C2591237
McAfee	Artemis!94E07AD0AE76
VBA32	BScope.TrojanRansom.Foreign
Malwarebytes	Malware.AI.3242734048
Panda	Trj/CI.A
Tencent	Win32.Trojan-spy.Panda.Hviu
Ikarus	Trojan-Spy.Remcos
Fortinet	W32/Kryptik.GIWU!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Win32/Kryptik.GHON?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Win32/Kryptik.GHON”?