Malware

Win32/Kryptik.GMAE removal

Malware Removal

The Win32/Kryptik.GMAE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.GMAE virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Arabic (Kuwait)
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
trick.matchoatmeal.icu
fuss.wavesfork.online

How to determine Win32/Kryptik.GMAE?


File Info:

crc32: 7DED4847
md5: 95ee5dbd0bbfe4961d9ac4833360c2f8
name: 95EE5DBD0BBFE4961D9AC4833360C2F8.mlw
sha1: 6784295d3d76db13c36699b5817c82da9da5df4c
sha256: 1a36b03e57b0a3aaf05676f2326799ae451b0dce590e4209d723bd35ac9ded52
sha512: 72730d15ebea2881ad3654e4db3395ff4598d5267dea904ea6bbd329440e84295c9e73a21ec64cfcc5d9be1fe84ef4d2ddac7db9abe5ed45ea504c2455f2a97e
ssdeep: 24576:ZtX417EkuOoo02304zL2D1jJUkQsistemECxEqNOpvMSdSEcXi+7exA:0NdMR2zL21jomRVN4lsiQexA
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Kryptik.GMAE also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 001ca5dd1 )
LionicTrojan.Win32.Zbot.lx9X
Elasticmalicious (high confidence)
DrWebTrojan.Vittalia.17867
McAfeePacked-FKC!95EE5DBD0BBF
CylanceUnsafe
SangforTrojan.Win32.Save.a
AlibabaAdWare:Win32/StartSurf.58983f54
K7GWTrojan ( 001ca5dd1 )
Cybereasonmalicious.d0bbfe
CyrenW32/Kryptik.DID.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GMAE
APEXMalicious
AvastWin32:Adware-gen [Adw]
CynetMalicious (score: 100)
Kasperskynot-a-virus:HEUR:AdWare.Win32.StartSurf.gen
BitDefenderGen:Heur.Mint.Zamg.1
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
MicroWorld-eScanGen:Heur.Mint.Zamg.1
TencentMalware.Win32.Gencirc.10cd376d
ComodoApplication.Win32.Dlhelper.GL@81g4fd
BitDefenderThetaAI:Packer.D5EE454E1F
McAfee-GW-EditionPacked-FKC!95EE5DBD0BBF
EmsisoftGen:Heur.Mint.Zamg.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.StartSurf.daip
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_97%
Antiy-AVLTrojan/Generic.ASMalwS.295C752
MicrosoftPWS:Win32/Zbot!ml
GDataGen:Heur.Mint.Zamg.1
VBA32BScope.Adware.DownloadHelper
MAXmalware (ai score=89)
MalwarebytesAdware.IStartSurf
PandaTrj/GdSda.A
RisingTrojan.Kryptik!1.B33C (CLASSIC)
YandexPUA.DownloadHelper!oQemVKV1x9M
IkarusPUA.Dlhelper
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.CFAU!tr
AVGWin32:Adware-gen [Adw]
Paloaltogeneric.ml

How to remove Win32/Kryptik.GMAE?

Win32/Kryptik.GMAE removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment