Win32/Kryptik.GJOB malicious file

The Win32/Kryptik.GJOB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.GJOB virus can do?

Executable code extraction
Creates RWX memory
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

all.fingersleep.bid

none.coalrate.men

a.tomx.xyz

How to determine Win32/Kryptik.GJOB?


File Info:
crc32: CD631EF0
md5: 15dfa2641d99b7da406dc45e14d0767e
name: 15DFA2641D99B7DA406DC45E14D0767E.mlw
sha1: 4e439a95afd2007d6cd1eeeb49b174ddc8b57e65
sha256: 1a41d25aa91bc4a7fa999a9069826a84fd6a30619b91f824ca87f5cb6a025d6b
sha512: a87ac98b765b6815fa77885daf4af9b8e76a5b10420a5b1efde2950ffd02eab40e22dbafdf65aa05e6f3100b1a12cca1e26afe857b605b5d5c6b50335fdae6d8
ssdeep: 24576:sqix84wiViovtHsGhCtJ8ivcNNhC9UiSF5kaw3DxPNatBxQ6pSzPX:sqi84T/ltCzNvUbOyfamoFzPX
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9Eden 
InternalName: ATASRANEOSRAT.EXE
FileVersion: 3.2.3.7
CompanyName: xa9Eden 
ProductName: ATASRANEOSRAT
ProductVersion: 3.2.3.7
OriginalFilename: atasraneosrat.exe
Translation: 0x0409 0x04e4

Win32/Kryptik.GJOB also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0053ba2f1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Vittalia.17914
Cynet	Malicious (score: 100)
ALYac	Application.Bundler.iStartSurf.1.Gen
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.3400856
Sangfor	Trojan.Win32.Save.a
Alibaba	Downloader:Win32/Kryptik.c1632d06
K7GW	Trojan ( 0053ba2f1 )
Cybereason	malicious.41d99b
Cyren	W32/Kryptik.CVO.gen!Eldorado
ESET-NOD32	a variant of Win32/Kryptik.GJOB
APEX	Malicious
Avast	FileRepMalware
Kaspersky	not-a-virus:UDS:AdWare.Win32.StartSurf.a
BitDefender	Application.Bundler.iStartSurf.1.Gen
NANO-Antivirus	Riskware.Win32.StartSurf.fhsrlw
MicroWorld-eScan	Application.Bundler.iStartSurf.1.Gen
Tencent	Malware.Win32.Gencirc.114d4cb0
Ad-Aware	Application.Bundler.iStartSurf.1.Gen
Sophos	Mal/EncPk-AOA
Comodo	Application.Win32.Dlhelper.GE@8159h4
BitDefenderTheta	Gen:NN.ZexaF.34236.8H0@aaLzaohi
McAfee-GW-Edition	BehavesLike.Win32.Worm.tt
FireEye	Generic.mg.15dfa2641d99b7da
Emsisoft	Application.Bundler.iStartSurf.1.Gen (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	AdWare.StartSurf.fjd
Avira	TR/ATRAPS.Gen
eGambit	Unsafe.AI_Score_98%
Antiy-AVL	Trojan/Generic.ASMalwS.27C3AD2
Microsoft	Trojan:Win32/Occamy.C
GData	Application.Bundler.iStartSurf.1.Gen
AhnLab-V3	PUP/Win32.StartSurf.R234859
Acronis	suspicious
McAfee	Packed-FKC!15DFA2641D99
MAX	malware (ai score=75)
VBA32	BScope.Adware.DownloadHelper
Malwarebytes	Adware.DLAssistant
Panda	Trj/GdSda.A
Rising	Trojan.Kryptik!1.B33C (CLASSIC)
Yandex	Trojan.GenAsa!ofGmKs14dkg
Ikarus	PUA.Win32.Prepscram
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.GJJV!tr
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Win32/Kryptik.GJOB?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Kryptik.GJOB malicious file