Win32/Kryptik.GUXW (file analysis)

The Win32/Kryptik.GUXW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.GUXW virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Kryptik.GUXW?


File Info:
crc32: EB0E8141
md5: 7c5cd7b8e84357ee01d6070e3acaf14c
name: 7C5CD7B8E84357EE01D6070E3ACAF14C.mlw
sha1: 73461a9dc424b86fce99ab3101040b3bb52d9cee
sha256: ded6c37855823cfe075eb6c8a7d86354a7f0b1ea1f35f2a4755455fb3ce2f3f2
sha512: 9e1b2b66a9c60eee32f454c025a7273a4f78746fadcad9f12187e11089fa0f46e0dabfe439d418062ec9790563885a5ea6ec5a055b9b40c4248383889cbb5090
ssdeep: 3072:Bv7jiqbD6M9Es5w+TLjASUpmBB7IOzDMf80H4Ew10sVJ9dOo8HliTpzzoI7h+aS0:Bv7jvves5w/SMQB8KoUd2iVzo0naGV
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: x7248x6743x6240x6709 (C) 2007
InternalName: PC_AutoLoad
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: PC_AutoLoad x5e94x7528x7a0bx5e8f
ProductVersion: 1, 0, 0, 1
FileDescription: PC_AutoLoad Microsoft x57fax7840x7c7bx5e94x7528x7a0bx5e8f
OriginalFilename: PC_AutoLoad.EXE
Translation: 0x0804 0x04b0

Win32/Kryptik.GUXW also known as:

Lionic	Trojan.Win32.Generic.4!c
ClamAV	Win.Malware.Bo5ijbki-9846980-0
ALYac	Gen:Malware.Heur.1.!copidmbe!.pq0@bm4IsFcb
Cylance	Unsafe
ESET-NOD32	a variant of Win32/Kryptik.GUXW
APEX	Malicious
Avast	Win32:GenMalicious-DMO [Trj]
BitDefender	Gen:Malware.Heur.1.!copidmbe!.pq0@bm4IsFcb
MicroWorld-eScan	Gen:Malware.Heur.1.!copidmbe!.pq0@bm4IsFcb
Tencent	Win32.Risk.Malware.Ajce
Ad-Aware	Gen:Malware.Heur.1.!copidmbe!.pq0@bm4IsFcb
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZexaF.34170.pq0@am4IsFcb
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	GenericR-DCW!7C5CD7B8E843
FireEye	Generic.mg.7c5cd7b8e84357ee
Emsisoft	Gen:Malware.Heur.1.!copidmbe!.pq0@bm4IsFcb (B)
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Malware.Heur.1.!copidmbe!.pq0@bm4IsFcb
McAfee	GenericR-DCW!7C5CD7B8E843
MAX	malware (ai score=99)
Malwarebytes	Malware.AI.2949657302
Panda	Trj/CI.A
Fortinet	GenericR.DCW!tr
AVG	Win32:GenMalicious-DMO [Trj]
Paloalto	generic.ml

How to remove Win32/Kryptik.GUXW?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Kryptik.GUXW (file analysis)