Win32:Crypt-RPT [Trj] (file analysis)

The Win32:Crypt-RPT [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32:Crypt-RPT [Trj] virus can do?

• Creates RWX memory
• The binary likely contains encrypted or compressed data.
• Network activity detected but not expressed in API logs
• Anomalous binary characteristics

How to determine Win32:Crypt-RPT [Trj]?

File Info:
crc32: A6374208
md5: 131f8364e0569d03e2386d97b18693bf
name: vbruntime.exe
sha1: db22d65361a430f84e5a47a9d38a3a3923e16b22
sha256: 7a35fbfd322674a0a39c9706816a484ed00c31ebefd1636ce66de7e29d7817e8
sha512: 3150736fe95fd28aca3d75b72d0c11748f5087951a063f285044758ea61770fbee1cac03f8903c31a8f2bca5ac63ebdfd30b118ec9b0bc3d03080f790df388ef
ssdeep: 24576:qKg/9CSc/ctmasYLBnumKC256xrG8LHBpGltWBJh7:rApc/c0ELBpaN8Lhp4qJh7
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MS CAB-Installer self-extracting archive

Version Info:
LegalCopyright: Copyright (C) Microsoft Corp. 1995
InternalName: Wextract                
FileVersion: 4.71.1015.0
CompanyName: Microsoft Corporation
ProductName: Microsoft(R) Windows NT(R) Operating System
ProductVersion: 4.71.1015.0
FileDescription: Win32 Cabinet Self-Extractor                                           
OriginalFilename: WEXTRACT.EXE            
Translation: 0x0409 0x04b0

Win32:Crypt-RPT [Trj] also known as:

How to remove Win32:Crypt-RPT [Trj]?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.