Categories: Malware

Should I remove “Win32/Kryptik.GVJG”?

The Win32/Kryptik.GVJG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.GVJG virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Reads data out of its own binary image
Unconventionial language used in binary resources: Portuguese
The binary likely contains encrypted or compressed data.
Attempts to repeatedly call a single API many times in order to delay analysis time
Collects information about installed applications
Creates a hidden or system file
Network activity detected but not expressed in API logs
Creates a copy of itself
Anomalous binary characteristics

How to determine Win32/Kryptik.GVJG?


File Info:
crc32: ADB81F0Bmd5: 94f407e8615ebe091ccf5035197ea1eaname: 1c.jpgsha1: 89c8938057a1b0514e3805536ccf3d2eb4acb1e0sha256: 14fe0fa7e16253e53ce4c25616e08006ad09330bea8df9161a47b2815cd83067sha512: 08ec9d99d753e9239d89a9081276329e51adb2d3414447b103eae8dcd21f02dabc86a39abd4f8405cec076dfdc74133796eb4117285add6bd13826de5c99e423ssdeep: 24576:JAkh6SRcwxbc0x7A2JHQWP5Nx8ubFKD8L1QA/:JAe6Spxb9xc2JHXP3xBpD1Qwtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
eUp Software: Zx19x01FileDescriptionComments: @x10x01CompanyNameeUp Utilities 2014: @x0ex01ProductVersionyright xa9 AVG Netherlands B. V. 2011: Lx12x01LegalTrademarkseUp StartUp Optimizer: <x0ex01FileVersioneUp Utilitiesx2122: Lx16x01ProductName0.1000.340: DTranslation: 0x0407 0x04b0

Win32/Kryptik.GVJG also known as:

MicroWorld-eScan	Trojan.GenericKD.32231067
FireEye	Generic.mg.94f407e8615ebe09
CAT-QuickHeal	Trojan.Agent
McAfee	Trickbot-FRDP!94F407E8615E
Malwarebytes	Ransom.FileCryptor
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan ( 0054985e1 )
BitDefender	Trojan.GenericKD.32231067
K7GW	Trojan ( 0054985e1 )
TrendMicro	Ransom.Win32.SHADE.SMA.hp
Cyren	W32/Emotet.TZ.gen!Eldorado
Symantec	Packed.Generic.459
APEX	Malicious
Avast	Win32:Malware-gen
GData	Trojan.GenericKD.32231067
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	Trojan:Win32/Fsysna.0c8fb956
NANO-Antivirus	Trojan.Win32.Fsysna.fvjuut
AegisLab	Trojan.Win32.Fsysna.4!c
Rising	Trojan.Generic@ML.100 (RDML:rtjsjFdFfDtr0w/C70dTOQ)
Ad-Aware	Trojan.GenericKD.32231067
Sophos	Troj/Xtbl-CY
Comodo	TrojWare.Win32.Ransom.Shade.VP@8e1mt6
DrWeb	Trojan.DownLoader30.2143
Zillya	Trojan.Fsysna.Win32.18415
Invincea	heuristic
McAfee-GW-Edition	Trickbot-FRDP!94F407E8615E
Emsisoft	Trojan-Ransom.Shade (A)
F-Prot	W32/Emotet.TZ.gen!Eldorado
Webroot	W32.Malware.Gen
Antiy-AVL	Trojan/Win32.TSGeneric
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D1EBCE9B
SUPERAntiSpyware	Ransom.Shade/Variant
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/CryptInject.SD!MTB
AhnLab-V3	Trojan/Win32.Shade.C3373163
Acronis	suspicious
ALYac	Trojan.Ransom.Shade
VBA32	Malware-Cryptor.Kirgudu
Cylance	Unsafe
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Kryptik.GVJG
TrendMicro-HouseCall	Ransom.Win32.SHADE.SMA.hp
Ikarus	Trojan-Ransom.Crypted007
eGambit	PE.Heur.InvalidSig
Fortinet	W32/Kryptik.GJFG!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	HEUR/QVM10.2.151D.Malware.Gen