Malware

About “Win32/Kryptik.GUKV” infection

Malware Removal

The Win32/Kryptik.GUKV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.GUKV virus can do?

  • Unconventionial language used in binary resources: Polish
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Kryptik.GUKV?


File Info:

crc32: A4454FFE
md5: 615bbcda34d837270e5dad8cc9a0ed25
name: 615BBCDA34D837270E5DAD8CC9A0ED25.mlw
sha1: 9ee5430bdc0d270e33372b61cf3539b3af3f8e09
sha256: af4304c437ec55dbc0acc24026596db19acc3eb52cc598dcd6c6bf2a3dd7ef0d
sha512: daf040a1df3c6e7b4bef34c4602b3e4bef793528ba6a015cced387b8f539503df8b86a02da260e14545ea733e0585a934a636fc5bb10341f5de2bdaf607b248c
ssdeep: 12288:Gyn4d9XfrrcGoCcwmLoWnln/hgAgQo3LFxLFDPop9Jb93LUtuc1PL/:Gy4d95ohjlJgvNRF1QhJgtX
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Kryptik.GUKV also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00551e0d1 )
LionicTrojan.Win32.Chapak.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealRansom.Stop.MP4
ALYacTrojan.Brsecmon.1
CylanceUnsafe
ZillyaTrojan.Generic.Win32.889957
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/GenKryptik.a0732b2a
K7GWTrojan ( 00551e0d1 )
Cybereasonmalicious.a34d83
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.GUKV
APEXMalicious
AvastWin32:CrypterX-gen [Trj]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Brsecmon.1
NANO-AntivirusTrojan.Win32.Chapak.fstrcj
MicroWorld-eScanTrojan.Brsecmon.1
TencentWin32.Trojan.Chapak.Wlzf
Ad-AwareTrojan.Brsecmon.1
SophosMal/Generic-R + Mal/GandCrab-G
ComodoTrojWare.Win32.PSW.Azorult.PD@8d9v8l
BitDefenderThetaGen:NN.ZexaF.34236.RuW@a8aHl!iG
TrendMicroTrojan.Win32.GLUPTEBA.SM.hp
FireEyeGeneric.mg.615bbcda34d83727
EmsisoftTrojan.Brsecmon.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.dmfnh
AviraHEUR/AGEN.1107506
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.2C011FD
MicrosoftTrojan:Win32/GenKryptik.S!MTB
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataTrojan.Brsecmon.1
AhnLab-V3Win-Trojan/MalPe25.Suspicious.X2011
Acronissuspicious
McAfeeSodinokibi!615BBCDA34D8
MAXmalware (ai score=100)
VBA32BScope.Trojan.Wacatac
MalwarebytesTrojan.MalPack.GS.Generic
PandaTrj/GdSda.A
TrendMicro-HouseCallTrojan.Win32.GLUPTEBA.SM.hp
RisingTrojan.Generic@ML.97 (RDML:RU7Z+TWBAH/0164UyD9/Dw)
YandexTrojan.Chapak!gdDqcyRIO8M
IkarusTrojan.Krypt
MaxSecureTrojan.Malware.74422297.susgen
FortinetW32/Kryptik.GWXD!tr
AVGWin32:CrypterX-gen [Trj]
Paloaltogeneric.ml

How to remove Win32/Kryptik.GUKV?

Win32/Kryptik.GUKV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment