Categories: Malware

Win32/Kryptik.GXHA removal

The Win32/Kryptik.GXHA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.GXHA virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Installs itself for autorun at Windows startup
Creates a hidden or system file
Creates a copy of itself
Anomalous binary characteristics

How to determine Win32/Kryptik.GXHA?


File Info:
crc32: 4DD22285md5: b8eb69bc32720f8e99431772e3ffec9bname: ph.exesha1: f8ae4e5d71c4b2d0f32e1a4e2239117cd52a2e4esha256: 55ad09b9dc25bcb9946753819cea5b1bef86415538fac47b64e18a150c07050bsha512: 0672831fcc8327ccfb4bce815d018d65bb37dfd638ba5e93691fbaf9e7fbe80333b21efcdc057fca34fcbb6d0d0f60c7bcf4b0f2267ca337732aa87e6b23ef56ssdeep: 12288:zgipWwIEVEZkHCaOPPMSkHVA4xNGAoMn:Bx6Pk/Hotype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: (C) 2007-2015  Flash-Integro LLCInternalName: CompatibilityOfficiallyFileVersion: 9.8.6.9CompanyName: Flash-Integro LLCPrivateBuild: 9.8.6.9LegalTrademarks: (C) 2007-2015  Flash-Integro LLCComments: Visioneer Wpsc Astronomically Ptmechanical FedProductName: CompatibilityOfficiallyLanguages: EnglishProductVersion: 9.8.6.9FileDescription: Visioneer Wpsc Astronomically Ptmechanical FedOriginalFilename: CompatibilityOfficiallyTranslation: 0x0409 0x04b0

Win32/Kryptik.GXHA also known as:

MicroWorld-eScan	Trojan.Autoruns.GenericKDS.41891918
CAT-QuickHeal	Trojan.Sybici
ALYac	Trojan.Autoruns.GenericKDS.41891918
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
CrowdStrike	win/malicious_confidence_80% (W)
BitDefender	Trojan.Autoruns.GenericKDS.41891918
K7GW	Trojan ( 0055950f1 )
K7AntiVirus	Trojan ( 0055950f1 )
TrendMicro	TROJ_GEN.R015C0WJC19
BitDefenderTheta	Gen:NN.ZexaF.32519.Fy0@aKl140ji
Cyren	W32/Kryptik.AGF.gen!Eldorado
Symantec	Trojan Horse
ESET-NOD32	a variant of Win32/Kryptik.GXHA
TrendMicro-HouseCall	TROJ_GEN.R015C0WJC19
GData	Trojan.Autoruns.GenericKDS.41891918
Kaspersky	Trojan-Proxy.Win32.Sybici.fh
Alibaba	TrojanProxy:Win32/Sybici.82343ced
NANO-Antivirus	Trojan.Win32.Sybici.gczkdx
AegisLab	Trojan.Win32.Sybici.h!c
Avast	Win32:Trojan-gen
Rising	Trojan.Generic@ML.90 (RDMK:TbzBlzxX1X77rExG7oegMA)
Ad-Aware	Trojan.Autoruns.GenericKDS.41891918
Sophos	Mal/Generic-S
Comodo	Malware@#2z14khnhl7kqq
F-Secure	Trojan.TR/Kryptik.qdcjx
DrWeb	Trojan.MulDrop11.20150
Zillya	Trojan.Kryptik.Win32.1801269
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.PUPXCK.gh
FireEye	Generic.mg.b8eb69bc32720f8e
Emsisoft	Trojan.Autoruns.GenericKDS.41891918 (B)
APEX	Malicious
F-Prot	W32/Kryptik.AGF.gen!Eldorado
Jiangmin	TrojanProxy.Sybici.n
Webroot	W32.Trojan.Gen
Avira	TR/Kryptik.qdcjx
Antiy-AVL	Trojan[Proxy]/Win32.Sybici
Endgame	malicious (high confidence)
Arcabit	Trojan.Autoruns.GenericS.D27F384E
AhnLab-V3	Malware/Win32.Generic.C3509748
ZoneAlarm	Trojan-Proxy.Win32.Sybici.fh
Microsoft	Trojan:Win32/Occamy.B
TACHYON	Trojan-Proxy/W32.Sybici.508928
Acronis	suspicious
McAfee	RDN/Generic.glv
MAX	malware (ai score=84)
VBA32	TrojanProxy.Sybici
Malwarebytes	Trojan.Crypt
Ikarus	Trojan-Ransom.GandCrab
Fortinet	W32/Kryptik.GXDR!tr
AVG	Win32:Trojan-gen
Panda	Trj/CI.A
Qihoo-360	Win32/Trojan.009