What is "Win32/Kryptik.GMSA"?

The Win32/Kryptik.GMSA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.GMSA virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Arabic (Yemen)
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

trick.matchoatmeal.icu

fuss.wavesfork.online

a.tomx.xyz

How to determine Win32/Kryptik.GMSA?


File Info:
crc32: 55B5472E
md5: 7ab1d31ba02e3e930a9a36071f1543ca
name: 7AB1D31BA02E3E930A9A36071F1543CA.mlw
sha1: 4ab253e13eefe52894336879af4061ee1c81acd8
sha256: 1a566aee9b8c3107189dd4458a30f5fba6a2b5f407822cf6dc2a02511bb83d6a
sha512: f6315a4e63ee2c597e29f00eb56c3df41f26a3789babf9078c0c25359c5d5217ce78cb22015366d988ba48dfd3a747a875cab0a354af2e22b85ac437ed652eaa
ssdeep: 24576:jtBWirG2xyHerkP9L8pOLJWcQ9oIoAfIu5Kk8kr8V5sdN6ebHPI3v:xmZ8pe0zMyhdN6eK
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2002-2005, Microsoft Corporation.  All rights reserved.
InternalName: TraceView.exe
FileVersion: V2.1.1
CompanyName: Microsoft Corporation
PrivateBuild: (none)
Comments: V2.1.1
ProductVersion: 2, 1, 1, 0
FileDescription: TraceView Application
OriginalFilename: TraceView.exe
Translation: 0x0409 0x04e4

Win32/Kryptik.GMSA also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.Vittalia.13656
Cynet	Malicious (score: 100)
CAT-QuickHeal	PUA.GenericPMF.S4565995
ALYac	Gen:Heur.Mint.Zamg.1
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	AdWare:Win32/StartSurf.58aa1f29
Cybereason	malicious.ba02e3
Cyren	W32/Kryptik.DID.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.GMSA
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Kaspersky	not-a-virus:AdWare.Win32.StartSurf.ecsf
BitDefender	Gen:Heur.Mint.Zamg.1
NANO-Antivirus	Riskware.Win32.StartSurf.fknqfg
MicroWorld-eScan	Gen:Heur.Mint.Zamg.1
Tencent	Malware.Win32.Gencirc.10cd266a
Ad-Aware	Gen:Heur.Mint.Zamg.1
Sophos	Mal/Generic-S
Comodo	Malware@#5m224zbr652i
BitDefenderTheta	Gen:NN.ZexaF.34236.wx0@a4aF76lO
McAfee-GW-Edition	BehavesLike.Win32.Generic.wz
FireEye	Generic.mg.7ab1d31ba02e3e93
Emsisoft	Gen:Heur.Mint.Zamg.1 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	AdWare.StartSurf.dbik
Avira	HEUR/AGEN.1114840
Antiy-AVL	Trojan/Generic.ASMalwS.2988E4B
Microsoft	PWS:Win32/Zbot!ml
GData	Gen:Heur.Mint.Zamg.1
AhnLab-V3	PUP/Win32.StartSurf.R246980
Acronis	suspicious
McAfee	Packed-FKC!7AB1D31BA02E
MAX	malware (ai score=84)
VBA32	Trojan.Vittalia
Panda	Trj/GdSda.A
Rising	Trojan.Kryptik!1.B33C (CLASSIC)
Yandex	PUA.StartSurf!NnfDAh3KYHA
Ikarus	PUA.Dlhelper
Fortinet	W32/GenKryptik.CFAV!tr
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml

How to remove Win32/Kryptik.GMSA?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Win32/Kryptik.GMSA”?