How to remove “Win32:Cryte”?

The Win32:Cryte is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:Cryte virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32:Cryte?


File Info:
name: BD3E8A3579D44245AEF7.mlw
path: /opt/CAPEv2/storage/binaries/4d768c4c6a632f6e6b74ed35551d60bf2df1b61888c9a68f3086b3e226e6e57e
crc32: 42091808
md5: bd3e8a3579d44245aef7ba2012a6f557
sha1: 069f4a17aaec8690c212eba6bc648eb68427c85c
sha256: 4d768c4c6a632f6e6b74ed35551d60bf2df1b61888c9a68f3086b3e226e6e57e
sha512: 1246b9aecee351844dcc4452bb73c8fd8539ef2d6c2350bbf00590b9ee93ffb0b6752742a7763b97990cc123cb956d1cfacc2659aac5cfd096a69bc7b0880807
ssdeep: 12288:u6oaV4gXdKyUgsjudqiqFd1BtOkodxduog/TXJa/x82IErOJsSV/Qt6M:7z0j5kqiVuog/TXJmxOHI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11D059F5BB1C48028D0D0017AEE60FB187DFE9C74EB21E6E3914DD52E2DE12D5863DAB6
sha3_384: d531e36043a55c7d4c2607e6030f00e9e0fa02f73134fb65dfa1d82a16cc94a87767f948c83cd51c8c9cba828a27218e
ep_bytes: 3c000000d430ef3005311b3123317c34
timestamp: 2020-09-25 23:25:17

Version Info:
0: [No Data]

Win32:Cryte also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Win32.Crytex.A
FireEye	Generic.mg.bd3e8a3579d44245
ALYac	Win32.Crytex.A
Cylance	Unsafe
Cybereason	malicious.579d44
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
TrendMicro-HouseCall	Cryp_Xed-16
BitDefender	Win32.Crytex.A
NANO-Antivirus	Virus.Win32.Virut-Gen.bwpxnc
Cynet	Malicious (score: 100)
Avast	Win32:Cryte
Ad-Aware	Win32.Crytex.A
Emsisoft	Win32.Crytex.A (B)
VIPRE	Win32.Crytex.A
TrendMicro	Cryp_Xed-16
McAfee-GW-Edition	BehavesLike.Win32.Infected.ch
Sophos	Mal/Generic-S
APEX	Malicious
GData	Win32.Crytex.A
Avira	W32/Crytex.1290
MAX	malware (ai score=87)
Antiy-AVL	Trojan/Generic.ASMalwS.83B4
Arcabit	Win32.Crytex.A
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Packed/Win.Suspicious.C5222194
Acronis	suspicious
McAfee	Artemis!BD3E8A3579D4
Malwarebytes	Malware.Heuristic.1003
Rising	Virus.Geksone!1.AD16 (CLASSIC)
AVG	Win32:Cryte
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Win32:Cryte?

Win32:Cryte removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X