What is “Win32/Kryptik.MW”?

The Win32/Kryptik.MW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.MW virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Win32/Kryptik.MW?


File Info:
name: E42EAD75D36D0B4FDB88.mlw
path: /opt/CAPEv2/storage/binaries/74b3c5de3c1ffbbad5a115236aadf3e5156697678c16e81c8aea45d05f260fcc
crc32: BCDB5D0B
md5: e42ead75d36d0b4fdb88f4c174a2e8ae
sha1: 134ab627b5a207f500cf30b0264b825507af023c
sha256: 74b3c5de3c1ffbbad5a115236aadf3e5156697678c16e81c8aea45d05f260fcc
sha512: b8ecba8a6803c55d3109dab19959cc6ceb02ba62d8b945878818aa0220b8bd38153073d2b1d5b155ad101b6335573aace589d2452876e95961307516ff1025f2
ssdeep: 768:KkuSvrZL+d+3x567fnglX+j+g/nCxW2t+XGViep3GXUcFUJR6a8ImGxPHXTzDUgT:ayvmf2uv/y+k36azhHXTUgDfI6
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1606302960F074D3AD08C653E28AE3126E7F94A34C982074691DB72F85634ADFE8655FC
sha3_384: 7905eae3f68c4e18bbfb2b65c2c3fc177dcb9b534b83dac9c2b587d504810f1d25aafb06a99c605399cd885eb7444da8
ep_bytes: 89e8e85500000031c000da00b2000000
timestamp: 2007-06-13 20:59:20

Version Info:
0: [No Data]

Win32/Kryptik.MW also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.FakeAntivirus.Gen
FireEye	Generic.mg.e42ead75d36d0b4f
McAfee	Generic Dropper.dz
VIPRE	FraudTool.Win32.CryptAV (v)
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.5d36d0
Symantec	Packed.Generic.187
ESET-NOD32	a variant of Win32/Kryptik.MW
APEX	Malicious
BitDefender	Trojan.FakeAntivirus.Gen
NANO-Antivirus	Virus.Win32.Gen.ccmw
Ad-Aware	Trojan.FakeAntivirus.Gen
Emsisoft	Trojan.FakeAntivirus.Gen (B)
Comodo	TrojWare.Win32.Trojan.Katusha.~A@1qgp20
Zillya	Downloader.FraudLoad.Win32.7261
TrendMicro	TROJ_GEN.R03BC0OB422
McAfee-GW-Edition	Generic Dropper.dz
Sophos	ML/PE-A + Mal/EncPk-FX
Ikarus	Trojan-Downloader.Win32.FakeAlert
GData	Trojan.FakeAntivirus.Gen
Jiangmin	TrojanDownloader.FraudLoad.efu
Antiy-AVL	Trojan/Generic.ASMalwS.2B74600
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
ALYac	Trojan.FakeAntivirus.Gen
MAX	malware (ai score=85)
VBA32	Trojan.MTA.0230
TrendMicro-HouseCall	TROJ_GEN.R03BC0OB422
Rising	Malware.Heuristic!ET#87% (RDMK:cmRtazoAR0LBGewlNYX+tTCMQIdQ)
Yandex	Trojan.Fraudpack.Gen
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Kryptik.MW!tr
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Win32/Kryptik.MW?

Win32/Kryptik.MW removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X