Malware

Win32/Kryptik.KGY removal

Malware Removal

The Win32/Kryptik.KGY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.KGY virus can do?

  • Reads data out of its own binary image
  • Uses Windows utilities for basic functionality
  • Network activity detected but not expressed in API logs
  • Attempts to identify installed AV products by installation directory

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Kryptik.KGY?


File Info:

crc32: 89989601
md5: e39e79d1c6698cc307d0bf1bd819a178
name: E39E79D1C6698CC307D0BF1BD819A178.mlw
sha1: 3614a32351fd285e84cf4b014593652d95261f10
sha256: 3d87a2ed7503e7f7053667bdfa497a28639af15cb66fda1d583cc31c6daec55d
sha512: 7f2fe55049352af6981fa710c2de02c34a0abef782292b6de2fab0850a8acf3fac8f25710c064a77eacf6a0b79a1f891cdcd50e17f85494114a435ea4b60f469
ssdeep: 24576:jmoO8itwaZQF/0RjcazH5kXDfF2FP3JO3RL8K5g97g:CZZUGj/zH5krF2d36/g97g
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Kryptik.KGY also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 004b9a731 )
DrWebTrojan.DownLoader22.22548
CAT-QuickHealTrojanRansom.Blocker
ALYacTrojan.GenericKD.6398125
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:Win32/Fareit.33d
K7GWTrojan ( 004b9a731 )
Cybereasonmalicious.1c6698
SymantecTrojan.Gen
ESET-NOD32a variant of Win32/Kryptik.KGY
APEXMalicious
AvastWin32:Evo-gen [Susp]
CynetMalicious (score: 99)
KasperskyTrojan-Ransom.Win32.Blocker.hrft
BitDefenderTrojan.GenericKD.6398125
NANO-AntivirusTrojan.Win32.Zusy.fmpaft
MicroWorld-eScanTrojan.GenericKD.6398125
TencentWin32.Trojan.Generic.Ajvi
Ad-AwareTrojan.GenericKD.6398125
SophosMal/Generic-S
F-SecureTrojan.TR/Crypt.ULPM.Gen
BitDefenderThetaGen:NN.ZexaF.34796.5mNfaCobF7gO
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_Blocker.R002C0PG721
McAfee-GW-EditionBehavesLike.Win32.Virus.tc
FireEyeGeneric.mg.e39e79d1c6698cc3
EmsisoftTrojan.GenericKD.6398125 (B)
SentinelOneStatic AI – Malicious SFX
AviraTR/Crypt.ULPM.Gen
MicrosoftTrojan:Win32/Tiggre!rfn
ArcabitTrojan.Generic.D61A0AD
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataTrojan.GenericKD.6398125
McAfeeArtemis!E39E79D1C669
MAXmalware (ai score=98)
MalwarebytesMalware.Heuristic.1003
TrendMicro-HouseCallRansom_Blocker.R002C0PG721
YandexTrojan.GenAsa!TzHIU/mmY3o
IkarusTrojan-Banker.Win32.Banker
FortinetW32/GenKryptik.AYHI!tr
AVGWin32:Evo-gen [Susp]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Blocker.HwYDEpsA

How to remove Win32/Kryptik.KGY?

Win32/Kryptik.KGY removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment