Malware

Win32/Kryptik.GJCE removal guide

Malware Removal

The Win32/Kryptik.GJCE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.GJCE virus can do?

  • Network activity detected but not expressed in API logs

How to determine Win32/Kryptik.GJCE?


File Info:

crc32: 74CA7A77
md5: 3949dec4b433d9dd11be2de5d545a9a8
name: 3949DEC4B433D9DD11BE2DE5D545A9A8.mlw
sha1: 883321f6e7928a3e49261250aabea4a0fd677933
sha256: 27d592a30ae3987926487615578aeac4d0f491c31bc92a45c66cb18ae8eee3e3
sha512: 00e742ffeb77fa345942a2508f32a7296a61befa51f284e30fc7fdb7a3f702476507e1871086854a9682f39fbe2caa1a8d1f47d6807d71a54c09959526bb0cb5
ssdeep: 12288:GdwUra4lX5NC1pThSUYhJM0St4yEvMlPps15j:GdwOlZ5NAThPx0StOsPu1
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: (c) 2015 Company qip.ru
InternalName: Autrun Gone
FileVersion: 7.9.7.2
CompanyName: qip.ru
PrivateBuild: 7.9.7.2
LegalTrademarks: (c) 2015 Company qip.ru
Comments: Entrxc3xa9 Negativity Rigor Chicken Merged Disrespectful
ProductName: Autrun Gone
Languages: English
ProductVersion: 7.9.7.2
FileDescription: Entrxc3xa9 Negativity Rigor Chicken Merged Disrespectful
OriginalFilename: Autrun Gone
Translation: 0x0409 0x04b0

Win32/Kryptik.GJCE also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00538a0b1 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader30.32374
CynetMalicious (score: 100)
ALYacGen:Variant.Ransom.Shade.27
CylanceUnsafe
ZillyaTrojan.Kryptik.Win32.1827702
SangforTrojan.Win32.Agent.wojup
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Yakes.d083b281
K7GWTrojan ( 00538a0b1 )
Cybereasonmalicious.4b433d
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GJCE
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan.Win32.Yakes.wvec
BitDefenderGen:Variant.Ransom.Shade.27
NANO-AntivirusTrojan.Win32.Yakes.fiwvnc
MicroWorld-eScanGen:Variant.Ransom.Shade.27
TencentMalware.Win32.Gencirc.114cf464
Ad-AwareGen:Variant.Ransom.Shade.27
ComodoMalware@#1b01cc479e3a2
BitDefenderThetaGen:NN.ZexaF.34266.QC0@aSenKDki
TrendMicroTROJ_SHARIK.YUYMV
FireEyeGeneric.mg.3949dec4b433d9dd
EmsisoftTrojan-Downloader.Zurgop (A)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Yakes.adli
AviraTR/Crypt.Agent.wojup
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.Ransom.Shade.27
GDataGen:Variant.Ransom.Shade.27
McAfeeArtemis!3949DEC4B433
MAXmalware (ai score=100)
VBA32Trojan.Yakes
MalwarebytesTrojan.Agent.VBS
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_SHARIK.YUYMV
RisingTrojan.Generic@ML.97 (RDML:wNIe57zVEduwbqZfkwB65w)
YandexTrojan.Yakes!ogDvoLvKPeA
IkarusTrojan-Ransom.GandCrab
MaxSecureTrojan.Malware.11902872.susgen
FortinetW32/Kryptik.GJCE!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Win32/Kryptik.GJCE?

Win32/Kryptik.GJCE removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment