Win32/Kryptik.GJUG malicious file

The Win32/Kryptik.GJUG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.GJUG virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Installs itself for autorun at Windows startup
Created a service that was not started

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Kryptik.GJUG?


File Info:
crc32: 21FFD867
md5: 57fd66671e3f9c3ed96e268bba6524be
name: 95a.exe
sha1: 85b0e5e80b4c3f3662d170fdc850b06c5273c5a7
sha256: fd1bb76f68b7b1d8e66bda211285afc41b41b5e97bdf015f761c74101055b6e3
sha512: 7fec95775b3d0acb1fb20d86bbd94522a2320c39082278f758ea999cc36d02673657bcdb0f2108a04245322739c9776b458b707bf08d03a4ea10dc7a82dd554e
ssdeep: 24576:kzWneE+PBa3PA815O6HSkX1CAG2R/7SSltMXZnJZr+IFhUBy1NBfkNS2qoMHAyU:kzWfQIPBSkX1CGSZNJV+Yq812qTANa
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 fCoder SIA 2016. All rights reserved.
InternalName: 2Printer
FileVersion: 5.3.0.0
CompanyName: xa9 fCoder SIA 2016
ProductName: 2Printer
ProductVersion: 5.3.0.0
FileDescription: 2Printer
OriginalFilename: 2Printer.exe
Translation: 0x0009 0x04b0

Win32/Kryptik.GJUG also known as:

MicroWorld-eScan	Trojan.GenericKD.40522799
FireEye	Generic.mg.57fd66671e3f9c3e
McAfee	GenericR-NPQ!57FD66671E3F
Malwarebytes	Trojan.SpamBot
Zillya	Trojan.Yakes.Win32.69427
BitDefender	Trojan.GenericKD.40522799
TrendMicro	TROJ_GEN.R007C0DDR19
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
GData	Trojan.GenericKD.40522799
Kaspersky	Trojan.Win32.Yakes.xjms
Alibaba	Trojan:Win32/Yakes.236fad50
NANO-Antivirus	Trojan.Win32.Yakes.fijnps
AegisLab	Trojan.Win32.Yakes.4!c
Rising	Spammer.Morphisil!8.E55A (C64:YzY0OuxvRViKoIxa)
Ad-Aware	Trojan.GenericKD.40522799
Emsisoft	Trojan.GenericKD.40522799 (B)
Comodo	TrojWare.Win32.TrojanProxy.Bunitu.RV@872vc7
F-Secure	Heuristic.HEUR/AGEN.1036312
DrWeb	Trojan.Ssebot.2
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Ransomware.tc
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Emotet
Cyren	W32/Trojan.EZTG-6298
Endgame	malicious (high confidence)
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1036312
Antiy-AVL	Trojan/Win32.Yakes
Microsoft	Trojan:Win32/Emotet.PB
Arcabit	Trojan.Generic.D26A542F
SUPERAntiSpyware	Trojan.Agent/Gen-Bunitu
AhnLab-V3	Malware/Win32.Generic.C2735349
ZoneAlarm	Trojan.Win32.Yakes.xjms
ESET-NOD32	a variant of Win32/Kryptik.GJUG
Acronis	suspicious
VBA32	BScope.Trojan.Yakes
ALYac	Trojan.GenericKD.40522799
Cylance	Unsafe
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R007C0DDR19
Tencent	Win32.Trojan.Yakes.Szcf
Yandex	Trojan.Yakes!2ukvcZ2Xjmw
SentinelOne	DFI – Malicious PE
Fortinet	W32/GenKryptik.CRTH!tr
AVG	Win32:MalwareX-gen [Trj]
Cybereason	malicious.71e3f9
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	Win32/Trojan.c51

How to remove Win32/Kryptik.GJUG?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Kryptik.GJUG malicious file