Malware

Win32/Kryptik.GJSR removal

Malware Removal

The Win32/Kryptik.GJSR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.GJSR virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Unconventionial language used in binary resources: Thai
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

How to determine Win32/Kryptik.GJSR?


File Info:

crc32: BAF240C6
md5: 7875f73f56be5ef8b9dc444b84951c87
name: 7875F73F56BE5EF8B9DC444B84951C87.mlw
sha1: f6c2e74af98930c21a3880b4dda45d5a5ed09846
sha256: 7af4a49422ec24195c03f55204606f7239a5f34482e5ca3d6a35dcd20e08fbd8
sha512: 08546b06cd6b5843f3c4cfec17df6534619aba0f681cee48d8dbd341051bdc922eeda8a62312eb2f482e827acc67c0bb1e31c3f3258f6708eb808588c07991ae
ssdeep: 3072:q+Luae5Bm6u5fesIUzX8f6g/YGB2cbq+ZsuGL82M:5LuPmFexUb8fT/YCllZ9oa
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Kryptik.GJSR also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00516fdf1 )
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.23869
CynetMalicious (score: 100)
ALYacTrojan.Brsecmon.1
CylanceUnsafe
ZillyaTrojan.GenericKD.Win32.149479
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/Kryptik.4e61fb51
K7GWTrojan ( 00516fdf1 )
Cybereasonmalicious.f56be5
CyrenW32/Kryptik.HQ.gen!Eldorado
ESET-NOD32a variant of Win32/Kryptik.GJSR
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Brsecmon.1
NANO-AntivirusTrojan.Win32.Chapak.fifpih
ViRobotTrojan.Win32.U.GandCrab.160256
SUPERAntiSpywareRansom.GandCrab/Variant
MicroWorld-eScanTrojan.Brsecmon.1
TencentWin32.Trojan.Generic.Aiif
Ad-AwareTrojan.Brsecmon.1
SophosML/PE-A + Mal/GandCrab-B
ComodoTrojWare.Win32.Ransom.GandCrab.AG@7wevet
BitDefenderThetaGen:NN.ZexaF.34608.juW@aGzZK4hG
TrendMicroMal_HPGen-50
McAfee-GW-EditionPacked-FKP!7875F73F56BE
FireEyeGeneric.mg.7875f73f56be5ef8
EmsisoftTrojan.Brsecmon.1 (B)
SentinelOneStatic AI – Suspicious PE
AviraHEUR/AGEN.1107191
eGambitUnsafe.AI_Score_78%
MicrosoftTrojan:Win32/GandCrypt.DSB!MTB
ArcabitTrojan.Brsecmon.1
AegisLabTrojan.Win32.Chapak.4!c
GDataTrojan.Brsecmon.1
AhnLab-V3Win-Trojan/Gandcrab08.Exp
Acronissuspicious
McAfeePacked-FKP!7875F73F56BE
VBA32BScope.Trojan.Vigorf
MalwarebytesTrojan.MalPack
PandaTrj/GdSda.A
TrendMicro-HouseCallMal_HPGen-50
RisingTrojan.Vigorf!8.EAEA (CLOUD)
IkarusTrojan.Win32.Krypt
FortinetW32/Kryptik.HCUD!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.0d1

How to remove Win32/Kryptik.GJSR?

Win32/Kryptik.GJSR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment