Win32/Kryptik.GLNI removal

The Win32/Kryptik.GLNI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.GLNI virus can do?

Executable code extraction
Compression (or decompression)
Creates RWX memory
Unconventionial language used in binary resources: Farsi
Exhibits possible ransomware file modification behavior
Creates a hidden or system file
Network activity detected but not expressed in API logs
Checks the CPU name from registry, possibly for anti-virtualization

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Kryptik.GLNI?


File Info:
crc32: CF30A56A
md5: feeb35fddad0092251f99535a608f0b8
name: FEEB35FDDAD0092251F99535A608F0B8.mlw
sha1: db6a9cc0a4c8f07a6fd8a11d96b4257fe035cf1f
sha256: 416607c797962f487db469554905fe710fc7afbb15139aa5ce3fdb29c71cdca8
sha512: 6c90f4b954f1ba6ac268762ad2f7acf2ce7c8da3a7dfce1da03ddbe964fcd1c134a88e7f19956564fdd5e51042c92cd428aad5b6cbff856e250b8d3e9cba920e
ssdeep: 6144:6wQii+TlZH7caoLiI72L/E0tA+j16kUef5NmaK56hNaLspJSQTHz:HM+v7Jke9h1qEP6fLspJSQTHz
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2004 - 2013, SopCast.com.  All rights reserved.
InternalName: SopCast.exe
FileVersion: 4.2.0.800
CompanyName: www.sopcast.com
Comments: www.sopcast.com
ProductName: SopCast
ProductVersion: 4.2.0.800
FileDescription: SopCast Main Application
OriginalFilename: SopCast.exe
Translation: 0x0409 0x04e4

Win32/Kryptik.GLNI also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0053fb461 )
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.24848
Cynet	Malicious (score: 99)
CAT-QuickHeal	Trojan.Mauvaise.SL1
ALYac	Trojan.Ransom.GandCrab
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.1500468
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Ransom:Win32/GandCrypt.76a0c977
K7GW	Trojan ( 0053fb461 )
Cybereason	malicious.ddad00
Symantec	Ransom.GandCrab
ESET-NOD32	a variant of Win32/Kryptik.GLNI
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.GandCrypt.fsi
BitDefender	Trojan.GenericKD.31258577
NANO-Antivirus	Trojan.Win32.GandCrypt.firotc
ViRobot	Trojan.Win32.R.Agent.430080.L
SUPERAntiSpyware	Trojan.Agent/Gen-Kryptik
MicroWorld-eScan	Trojan.GenericKD.31258577
Tencent	Malware.Win32.Gencirc.114d41b8
Ad-Aware	Trojan.GenericKD.31258577
Sophos	Mal/Generic-R + Mal/Kryptik-CY
Comodo	Malware@#u5wdspaylov6
BitDefenderTheta	Gen:NN.ZexaF.34790.Au0@aS0vQmcO
TrendMicro	BKDR_ZEGOST.SM51
McAfee-GW-Edition	RDN/Ransom
FireEye	Generic.mg.feeb35fddad00922
Emsisoft	Trojan.GenericKD.31258577 (B)
Jiangmin	Trojan.GandCrypt.acg
Webroot	W32.Trojan.Gen
Avira	TR/AD.GandCrab.Q
eGambit	Unsafe.AI_Score_94%
Antiy-AVL	Trojan/Generic.ASMalwS.2853A54
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	VirTool:Win32/CeeInject.BDE!bit
Arcabit	Trojan.Generic.D1DCF7D1
AegisLab	Trojan.Win32.GandCrypt.4!c
GData	Trojan.GenericKD.31258577
AhnLab-V3	Win-Trojan/Gandcrab09.Exp
McAfee	RDN/Ransom
MAX	malware (ai score=100)
VBA32	BScope.TrojanSpy.Noon
Panda	Trj/GdSda.A
TrendMicro-HouseCall	BKDR_ZEGOST.SM51
Yandex	Trojan.GenAsa!bErFpBAj+Iw
Ikarus	Trojan.Win32.Crypt
Fortinet	W32/GenKryptik.CKDY!tr.ransom
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.GandCrab.HgIASREA

How to remove Win32/Kryptik.GLNI?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Kryptik.GLNI removal