Malware

Win32/Kryptik_AGen.BGD information

Malware Removal

The Win32/Kryptik_AGen.BGD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik_AGen.BGD virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family

How to determine Win32/Kryptik_AGen.BGD?


File Info:

name: 3CBEA6296509AD86E048.mlw
path: /opt/CAPEv2/storage/binaries/76b91157afb8e8269a751201492952307febf27b60c9a9bf72260d6348891604
crc32: 1C5839EC
md5: 3cbea6296509ad86e0484cffd2b86a3b
sha1: aa9ea036d53c701b69101ab7828bc2c892ad4389
sha256: 76b91157afb8e8269a751201492952307febf27b60c9a9bf72260d6348891604
sha512: 4c5abca675b0011ce16f3e902411c20986ccfefffb2e76956f55e4b5ab0cf7b677eb660da8b359b175748919330bf700acbf93fb68ed778f81e1e484df3a251b
ssdeep: 6144:e+smC/ame51nt32tM3ZjnOmzvP2e6V40saiigCD4H2hz8QZA:56oBt3DJD5Tee6VQ5zCD4V3
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T19A84BFDDBCEE4A9FCCB6BA362866F40185919E46CEFF4182ED11007E3D71A84706643E
sha3_384: 3238504ae68c37eecd0498714ccc522f068a0c7448b42725d8c51e2aef7b4193d915e790bc4b8e9e5c0df6be1a4d29aa
ep_bytes: 7f53494f2f3acdc82adbc4593899ace3
timestamp: 1974-02-09 00:00:00

Version Info:

0: [No Data]

Win32/Kryptik_AGen.BGD also known as:

BkavW32.AIDetectMalware
AVGWin32:Evo-gen [Trj]
MicroWorld-eScanTrojan.GenericKDZ.98614
SkyhighBehavesLike.Win32.Generic.fc
McAfeeTrojan-FVOQ!3CBEA6296509
MalwarebytesCrypt.Trojan.MSIL.DDS
VIPRETrojan.GenericKDZ.98614
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0001b3411 )
K7GWTrojan ( 0001b3411 )
CrowdStrikewin/malicious_confidence_100% (D)
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik_AGen.BGD
CynetMalicious (score: 100)
APEXMalicious
AvastWin32:Evo-gen [Trj]
ClamAVWin.Packed.Razy-9828382-0
KasperskyVHO:Trojan.Win32.Copak.gen
BitDefenderTrojan.GenericKDZ.98614
NANO-AntivirusTrojan.Win32.Kryptik.fltxko
TencentTrojan.Win32.Kryptik.hdb
EmsisoftTrojan.GenericKDZ.98614 (B)
F-SecureTrojan.TR/Crypt.ZPACK.Gen
DrWebTrojan.PackedENT.123
ZillyaTrojan.KryptikAGen.Win32.37006
FireEyeGeneric.mg.3cbea6296509ad86
SophosTroj/Agent-BFEY
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.cwvjg
VaristW32/Trojan.NJGF-3047
AviraTR/Crypt.ZPACK.Gen
MAXmalware (ai score=87)
Antiy-AVLTrojan/Win32.Kryptik.girh
MicrosoftTrojan:Win32/Glupteba.MT!MTB
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
ArcabitTrojan.Generic.D18136
GDataWin32.Trojan.PSE.11XGYE9
GoogleDetected
AhnLab-V3Packed/Win.FJB.C5394144
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.36802.y8Z@a8s1DTi
ALYacTrojan.GenericKDZ.98614
TACHYONTrojan/W32.Selfmod
VBA32Trojan.Khalesi
Cylanceunsafe
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.B34D (CLASSIC)
IkarusTrojan-Downloader.Win32.FakeAlert
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GIFQ!tr
Cybereasonmalicious.96509a
DeepInstinctMALICIOUS
alibabacloudVirTool:Win/Kryptik.GIRH

How to remove Win32/Kryptik_AGen.BGD?

Win32/Kryptik_AGen.BGD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment