Should I remove "Win32/Kryptik.GKTT"?

The Win32/Kryptik.GKTT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.GKTT virus can do?

Executable code extraction
Compression (or decompression)
Creates RWX memory
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Attempts to modify proxy settings
Collects information to fingerprint the system

Related domains:

z.whorecord.xyz

a.tomx.xyz

forguda.us

How to determine Win32/Kryptik.GKTT?


File Info:
crc32: E6B519D6
md5: 174d6241cea5f85c44a59637f5b88f28
name: 174D6241CEA5F85C44A59637F5B88F28.mlw
sha1: adbc4cb56a4c9fe755d993cfe79cfd011ef68755
sha256: 61e243e4664b0841f05336fb52625fab7150ccb61595e1178a6d51c824fe80de
sha512: 8d898f2654cd3dc723a36ee95808e6d653b65959c727d3a210987a08ef7a7498a57f9100964e787923cc29f3a4328161f83cd7fcf5330b9642f2c9a41a47ef93
ssdeep: 24576:U2hlS2nwjBCOv+T66pFSgKyLi8+Vc7TtM:XvwjV6pguLF+VcX
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: (C) 2007-2015  YANDEX LLC
CompanyName: YANDEX LLC
FileDescription: Crsair People Xirc Pnp Tinkered Writeback
LegalTrademarks: (C) 2007-2015  YANDEX LLC
ProductName: Emailed Grandfather
ProductVersion: 3.7.2.3
PrivateBuild: 3.7.2.3
OriginalFilename: Emailed Grandfather.exe
Translation: 0x0409 0x04b0

Win32/Kryptik.GKTT also known as:

K7AntiVirus	Trojan ( 0053c7111 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ransom.Dharma.42
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.1489269
Sangfor	Infostealer.Win32.Coins.klo
Alibaba	TrojanPSW:Win32/Coins.ce2d1174
K7GW	Trojan ( 0053c7111 )
Cybereason	malicious.1cea5f
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.GKTT
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-PSW.Win32.Coins.klo
BitDefender	Gen:Variant.Ransom.Dharma.42
NANO-Antivirus	Trojan.Win32.Coins.fhyqzq
MicroWorld-eScan	Gen:Variant.Ransom.Dharma.42
Tencent	Win32.Trojan-qqpass.Qqrob.Dxdl
Ad-Aware	Gen:Variant.Ransom.Dharma.42
Comodo	Packed.Win32.MUPX.Gen@24tbus
BitDefenderTheta	Gen:NN.ZexaF.34058.YmKfaiBtW9fi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.cc
FireEye	Generic.mg.174d6241cea5f85c
Emsisoft	Gen:Variant.Ransom.Dharma.42 (B)
Webroot	Trojan.Dropper.Gen
Avira	HEUR/AGEN.1120572
Antiy-AVL	Trojan/Generic.ASMalwS.2806FE3
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Occamy.C
GData	Gen:Variant.Ransom.Dharma.42
AhnLab-V3	Malware/Win32.Generic.C2718457
McAfee	Artemis!174D6241CEA5
VBA32	BScope.Adware.OpenSUpdater
Panda	Trj/GdSda.A
Yandex	Trojan.PWS.Coins!Uqbfw0DPD7E
Ikarus	Trojan-Ransom.GandCrab
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Coins.GKTT!tr.pws
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/TrojanSpy.Coins.HgIASOgA

How to remove Win32/Kryptik.GKTT?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Win32/Kryptik.GKTT”?