Malware

Win32/Kryptik_AGen.BGD removal tips

Malware Removal

The Win32/Kryptik_AGen.BGD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik_AGen.BGD virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Win32/Kryptik_AGen.BGD?


File Info:

name: 10393ACB419F00A138A4.mlw
path: /opt/CAPEv2/storage/binaries/0ec644d7bd690a0ea6ee87192d2f3bc1aa1124931c6c94f6f96e1e53cfb2d5e9
crc32: AFB6BE3F
md5: 10393acb419f00a138a4e858d03c9727
sha1: 70b05d152a843af424a803541a18489d193da6cf
sha256: 0ec644d7bd690a0ea6ee87192d2f3bc1aa1124931c6c94f6f96e1e53cfb2d5e9
sha512: 29409fb7e282e8efcfdd1d082d78a8fa6e2b6090b99eebd559bd4668e8c845d8db75bb25c732040868f41a2dd43277a42cfd6a4ae69394062c256a4e9de2b0bd
ssdeep: 24576:LmpizWmCo4Bbv5qKgACDGRCkua/ZSCBHn67c:RsvQ8CDGR9ugVBHn64
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T19515CF0C47A85703C052063ABD1ECD7F161EAA3CBB67CA7132903C6BB5A57D589D7A38
sha3_384: 2cefcb882fd583d316c5adfcdcff865dc0bfbf8be51b4325fc328ab333f1085958cf7508720a11ea17bd0d04f3321174
ep_bytes: 67af188a37c69c0d3227959cb06dfd26
timestamp: 1974-02-09 00:00:00

Version Info:

0: [No Data]

Win32/Kryptik_AGen.BGD also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.104139
ClamAVWin.Packed.Razy-9836307-0
SkyhighBehavesLike.Win32.Generic.dc
McAfeeTrojan-FVOQ!10393ACB419F
MalwarebytesGeneric.Malware.AI.DDS
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005a45ef1 )
K7GWTrojan ( 005a15b21 )
CrowdStrikewin/malicious_confidence_100% (D)
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Kryptik_AGen.BGD
APEXMalicious
CynetMalicious (score: 100)
KasperskyVHO:Trojan.Win32.Khalesi.gen
BitDefenderTrojan.GenericKDZ.104139
NANO-AntivirusTrojan.Win32.PackedENT.ixecpq
AvastWin32:Evo-gen [Trj]
TencentTrojan.Win32.Selfmod.ka
TACHYONTrojan/W32.Selfmod
SophosTroj/Agent-BFEY
F-SecureTrojan.TR/Crypt.XPACK.Gen2
VIPRETrojan.GenericKDZ.104139
FireEyeGeneric.mg.10393acb419f00a1
EmsisoftTrojan.GenericKDZ.104139 (B)
IkarusTrojan-Downloader.Win32.FakeAlert
GDataWin32.Trojan.PSE.1B28NHU
JiangminTrojan.Generic.ggvdj
GoogleDetected
AviraTR/Crypt.XPACK.Gen2
Antiy-AVLTrojan/Win32.Kryptik.gify
Kingsoftmalware.kb.a.973
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
ArcabitTrojan.Generic.D196CB
ZoneAlarmVHO:Trojan.Win32.Khalesi.gen
MicrosoftTrojan:Win32/Cerber.MPI!MTB
VaristW32/Trojan.MJSE-7842
AhnLab-V3Packed/Win.FJB.R622264
Acronissuspicious
VBA32Trojan.Copak
MAXmalware (ai score=85)
Cylanceunsafe
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.BF57 (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GIFQ!tr
BitDefenderThetaGen:NN.ZexaF.36680.68Y@a84aMOh
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.52a843
DeepInstinctMALICIOUS

How to remove Win32/Kryptik_AGen.BGD?

Win32/Kryptik_AGen.BGD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment