Malware

About “Win32/Kryptik.GIEK” infection

Malware Removal

The Win32/Kryptik.GIEK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.GIEK virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Danish
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

redirector.gvt1.com
r3—sn-4g5e6nzz.gvt1.com
update.googleapis.com

How to determine Win32/Kryptik.GIEK?


File Info:

crc32: 3663C01C
md5: 27175043e7278fbe53021780be8b0dfc
name: 27175043E7278FBE53021780BE8B0DFC.mlw
sha1: deca1eeb1330ec77e3c144ca4e9307bd195883ed
sha256: 14be69a42ee23e086e51414008202399c39d90cc33f17057b41ccc29b6bfa3ac
sha512: 2aceb4a7c226e879b1c72c223df98fd0bc2e4c8eac678a053350fe47592183bd1593f232604d0a8ade3b7c95f75f657b5c4d9cb47bcf3832e83d35b636e828ef
ssdeep: 6144:FwzVa9b/FfJ2fhbIjgPOBoFQNR12jTvcrri:ks9bJXgPmNR12fvcr2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Kryptik.GIEK also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Ransom.GandCrab.Gen.2
FireEyeGeneric.mg.27175043e7278fbe
CAT-QuickHealTrojan.Mauvaise.SL1
McAfeeGenericRXGA-AR!27175043E727
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforWin.Packed.Gandcrab-6552923-4
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.Ransom.GandCrab.Gen.2
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.3e7278
BitDefenderThetaGen:NN.ZexaF.34590.ruX@auA5KphG
CyrenW32/S-c4c124a4!Eldorado
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.GIEK
APEXMalicious
AvastFileRepMalware
ClamAVWin.Packed.Gandcrab-6552923-4
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.Encoder.femxbe
ViRobotTrojan.Win32.GandCrab.Gen.A
AegisLabTrojan.Win32.GandCrypt.j!c
RisingTrojan.Kryptik!8.8 (RDMK:cmRtazrItGWLzCfz0qG2N057IH0E)
Ad-AwareTrojan.Ransom.GandCrab.Gen.2
TACHYONRansom/W32.GandCrab
SophosMal/Generic-R + Mal/Agent-AUL
ComodoTrojWare.Win32.Chapak.GI@7q43kg
F-SecureHeuristic.HEUR/AGEN.1106533
DrWebTrojan.Encoder.24384
ZillyaBackdoor.Mokes.Win32.1282
TrendMicroRansom.Win32.GANDCRAB.SMLA.hp
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
EmsisoftTrojan.Ransom.GandCrab.Gen.2 (B)
IkarusTrojan-Ransom.GandCrab
JiangminTrojan.GandCrypt.gh
MaxSecureRansomeware.CRAB.gen
AviraHEUR/AGEN.1106533
Antiy-AVLTrojan/Win32.TSGeneric
MicrosoftTrojan:Win32/Predator.PVD!MTB
ArcabitTrojan.Ransom.GandCrab.Gen.2
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
AhnLab-V3Win-Trojan/Gandcrab.Exp
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataWin32.Trojan-Ransom.GandCrab.N
CynetMalicious (score: 100)
Acronissuspicious
VBA32BScope.Trojan.Encoder
ALYacTrojan.Ransom.GandCrab.Gen.2
MAXmalware (ai score=100)
MalwarebytesTrojan.MalPack
PandaTrj/Genetic.gen
TrendMicro-HouseCallRansom.Win32.GANDCRAB.SMLA.hp
TencentMalware.Win32.Gencirc.10b4d10c
YandexTrojan.GandCrypt!i2Qwe1dyaps
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetW32/GenKryptik.CNAR!tr
AVGFileRepMalware
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360HEUR/QVM10.2.6571.Malware.Gen

How to remove Win32/Kryptik.GIEK?

Win32/Kryptik.GIEK removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment