Categories: Malware

What is “Win32/Kryptik.GVSR”?

The Win32/Kryptik.GVSR file is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Win32/Kryptik.GVSR virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Reads data out of its own binary image
Installs itself for autorun at Windows startup
Collects information about installed applications
Creates a hidden or system file
Creates a copy of itself
Anomalous binary characteristics

How to determine Win32/Kryptik.GVSR?

General:

Operating System: Windows 7 / 8 / 8.1 / 10 Virus Name: generic.ml

File Info:

Name: 2c.jpg

Size: 1376944

Type: PE32 executable (GUI) Intel 80386, for MS Windows

MD5: 8f301e6bf813e0e2132b092162a23e22

SHA1: 27c1537214f995094b7e4748855682afc7679767

SH256: 3e98eb61e6b238064ffcecbcb974076da7839d22ee78187b764a7cbda561e8e3

Version Info:

[No Data]

Win32/Kryptik.GVSR also known as:

ALYac	Trojan.Ransom.Shade
APEX	Malicious
AVG	Win32:CrypterX-gen [Trj]
Acronis	suspicious
Ad-Aware	Trojan.GenericKD.32335510
AegisLab	Trojan.Win32.Fsysna.4!c
AhnLab-V3	Trojan/Win32.Kryptik.R289139
Alibaba	Trojan:Win32/Fsysna.2bddb494
Antiy-AVL	Trojan/Win32.AGeneric
Arcabit	Trojan.Generic.D1ED6696
Avast	Win32:CrypterX-gen [Trj]
Avira	TR/Crypt.Agent.vzdsy
BitDefender	Trojan.GenericKD.32335510
BitDefenderTheta	Gen:NN.ZexaF.32250.ur1@aaX5Dbci
CAT-QuickHeal	Trojan.ShadePMF.S7451125
ClamAV	Win.Packed.Generic-7153077-0
Comodo	Malware@#2g79v5f2650h0
CrowdStrike	win/malicious_confidence_100% (W)
Cylance	Unsafe
Cyren	W32/Agent.BAE.gen!Eldorado
DrWeb	Trojan.Packed2.41981
ESET-NOD32	a variant of Win32/Kryptik.GVSR
Emsisoft	Trojan-Ransom.Shade (A)
Endgame	malicious (high confidence)
F-Prot	W32/Agent.BAE.gen!Eldorado
F-Secure	Trojan.TR/Crypt.Agent.vzdsy
FireEye	Generic.mg.8f301e6bf813e0e2
Fortinet	W32/Kryptik.GLWT!tr
GData	Trojan.GenericKD.32335510
Ikarus	Trojan-Banker.Agent
Invincea	heuristic
Jiangmin	Trojan.Generic.dxzjq
K7AntiVirus	Trojan ( 0053f76c1 )
K7GW	Trojan ( 0053f76c1 )
Kaspersky	HEUR:Trojan.Win32.Generic
MAX	malware (ai score=100)
McAfee	Trickbot-FRDP!8F301E6BF813
McAfee-GW-Edition	Trickbot-FRDP!8F301E6BF813
MicroWorld-eScan	Trojan.GenericKD.32335510
Microsoft	Trojan:Win32/Dynamer!rfn
NANO-Antivirus	Trojan.Win32.Fsysna.fxehko
Paloalto	generic.ml
Panda	Trj/Genetic.gen
Qihoo-360	HEUR/QVM10.2.8155.Malware.Gen
Rising	Trojan.Kryptik!8.8 (TFE:5:vLv2KtKx7JD)
SentinelOne	DFI – Suspicious PE
Sophos	Mal/Emotet-Q
Symantec	Packed.Generic.459
TrendMicro	Ransom.Win32.SHADE.SMB.hp
TrendMicro-HouseCall	Ransom.Win32.SHADE.SMB.hp
VBA32	BScope.Malware-Cryptor.Filecoder
VIPRE	Trojan.Win32.Generic!BT
ViRobot	Trojan.Win32.Z.Kryptik.1376944
Webroot	W32.Malware.Gen
Yandex	Trojan.Shade!
Zillya	Trojan.Generic.Win32.934749
ZoneAlarm	HEUR:Trojan.Win32.Generic