Malware

Win32/Kryptik_AGen.BGD removal instruction

Malware Removal

The Win32/Kryptik_AGen.BGD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik_AGen.BGD virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Win32/Kryptik_AGen.BGD?


File Info:

name: 5DAD864938C8A8AF0A41.mlw
path: /opt/CAPEv2/storage/binaries/703b248d57fb55364c31a25671b0361287e204a3b01e27e27bcbd199e3429c3a
crc32: 625BECCF
md5: 5dad864938c8a8af0a41e0047df9972e
sha1: f621fc158fc6b5c176c48e967c3409b0f8a817eb
sha256: 703b248d57fb55364c31a25671b0361287e204a3b01e27e27bcbd199e3429c3a
sha512: 04148d100d2907ee33c2a5f67ad6e3c6cb99d56178739049ba37407766a5ae52fccbc22cdf2fcb927746c6fe9f756f538a65e9a5ee49e1c8454dd4af91bc2f5d
ssdeep: 12288:JljslY6gbsMPVh0py6VQ5zCD4VZRDGWF1m3aYhOA6eXV:TjmgDPP0py6VQ5zY431CaYAeXV
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1F8C49C98FC3FCA50CCEBBC3F1DB167418DE6974A2F5B4044E96490A52C31981BDA5CEA
sha3_384: 6aedf12d11b7d18089ff200865d53d360473f4f85968c46263fdf3a6a73d1d6478b049b5790b60472d76ad99127dc368
ep_bytes: c7d1ba8b97b83e0c9259379d801b5f27
timestamp: 1974-02-09 00:00:00

Version Info:

0: [No Data]

Win32/Kryptik_AGen.BGD also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.98614
ClamAVWin.Packed.Razy-9828382-0
FireEyeGeneric.mg.5dad864938c8a8af
SkyhighBehavesLike.Win32.RAHack.hc
McAfeePacked-FJB!5DAD864938C8
MalwarebytesCrypt.Trojan.MSIL.DDS
VIPRETrojan.GenericKDZ.98614
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005a45ef1 )
K7GWTrojan ( 005a45ef1 )
CrowdStrikewin/malicious_confidence_100% (D)
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik_AGen.BGD
APEXMalicious
CynetMalicious (score: 100)
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderTrojan.GenericKDZ.98614
NANO-AntivirusTrojan.Win32.Kryptik.frhgad
AvastWin32:TrojanX-gen [Trj]
TencentTrojan.Win32.Kryptik.hdb
TACHYONTrojan/W32.Selfmod
SophosTroj/Agent-BFEY
F-SecureTrojan.TR/Crypt.ZPACK.Gen
ZillyaTrojan.KryptikAGen.Win32.105429
EmsisoftTrojan.GenericKDZ.98614 (B)
IkarusTrojan-Downloader.Win32.FakeAlert
GDataWin32.Trojan.PSE.11XGYE9
JiangminTrojan.Generic.cqgcs
GoogleDetected
AviraTR/Crypt.ZPACK.Gen
Antiy-AVLTrojan/Win32.Kryptik.girh
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
ArcabitTrojan.Generic.D18136
ZoneAlarmUDS:DangerousObject.Multi.Generic
MicrosoftTrojan:Win32/Glupteba.MT!MTB
VaristW32/Trojan.NJGF-3047
AhnLab-V3Packed/Win.FJB.C5394144
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.36744.K8Z@a8s1DTi
ALYacTrojan.GenericKDZ.98614
MAXmalware (ai score=84)
VBA32Trojan.Khalesi
Cylanceunsafe
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.BF57 (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.58fc6b
DeepInstinctMALICIOUS

How to remove Win32/Kryptik_AGen.BGD?

Win32/Kryptik_AGen.BGD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment