Win32/Kryptik.OBG malicious file

The Win32/Kryptik.OBG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.OBG virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Unconventionial language used in binary resources: Russian
Deletes its original binary from disk
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Creates a copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Kryptik.OBG?


File Info:
crc32: 32D31BF9
md5: 51b004c46117cc4ee06eb2e5a3a865da
name: 51B004C46117CC4EE06EB2E5A3A865DA.mlw
sha1: 41fbc3f1f91a0c2bdcb7c7e035cf66166aa38408
sha256: c0b10cb1fd82d428b41e6fb52a66c495d387c98c00a3a224b2585a7135a7607c
sha512: 79ff524025ea5118030828c080b865abe5f329500e303aa1c92afd6ced43e5dbd39c0cf2bb4c0a68c147a916f0401205178b94ed65261045fe8ea29c07774168
ssdeep: 768:MSCFRpZQjZtvEcApDoPEHtbmkz1Lb4ZD:GTcTODo8Htbm04ZD
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2011 Heaventools Software
InternalName: Gn.exe
FileVersion: 3.0.5739.4303
CompanyName: BitDefender
ProductName: Guano
ProductVersion: 3.0.5739.4303
FileDescription: Guan
OriginalFilename: Guan.exe
Translation: 0x043f 0x04b0

Win32/Kryptik.OBG also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 00274f891 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Fakealert.29041
ALYac	Gen:Variant.Ransom.10
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.1133264
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Ransom:Win32/Trasbind.568cd957
K7GW	Trojan ( 00274f891 )
Cybereason	malicious.46117c
Cyren	W32/Ransom.O.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.OBG
APEX	Malicious
Avast	FileRepMetagen [Malware]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Ransom.10
NANO-Antivirus	Trojan.Win32.PornoAsset.nckcd
MicroWorld-eScan	Gen:Variant.Ransom.10
Tencent	Win32.Trojan.Pornoasset.beyi
Ad-Aware	Gen:Variant.Ransom.10
Sophos	ML/PE-A
F-Secure	Trojan.TR/Crypt.XPACK.Gen
BitDefenderTheta	Gen:NN.ZexaF.34142.bu0@aSiV@qdc
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TSPY_ZBOT.GER
McAfee-GW-Edition	BehavesLike.Win32.Dropper.mh
FireEye	Generic.mg.51b004c46117cc4e
Emsisoft	Gen:Variant.Ransom.10 (B)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Malware.Gen
Avira	TR/Crypt.XPACK.Gen
eGambit	Generic.Malware
Microsoft	Ransom:Win32/Trasbind.A
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Ransom.10
AhnLab-V3	Trojan/Win32.PornoAsset.C66065
Acronis	suspicious
McAfee	Artemis!51B004C46117
MAX	malware (ai score=100)
VBA32	BScope.Trojan.MulDrop
Malwarebytes	Spyware.PasswordStealer.XGen
Panda	Generic Malware
TrendMicro-HouseCall	TSPY_ZBOT.GER
Rising	Trojan.Generic@ML.100 (RDML:mHld6bkZtNiJBdCR2nAKwQ)
Yandex	Trojan.GenAsa!A5hxYaTCmuI
Ikarus	Trojan.Win32.Ransom
MaxSecure	Trojan.Malware.4077443.susgen
Fortinet	W32/Generic.AC.29A0CD!tr
AVG	FileRepMetagen [Malware]
Paloalto	generic.ml

How to remove Win32/Kryptik.OBG?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Kryptik.OBG malicious file