How to remove “Win32:Kryptik-LUP [Trj]”?

The Win32:Kryptik-LUP [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:Kryptik-LUP [Trj] virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32:Kryptik-LUP [Trj]?


File Info:
name: 249EC2396C6016FE543B.mlw
path: /opt/CAPEv2/storage/binaries/d2d69303af64e60a6a9efdfca913b38faac0ec7746ace4ff6324cd65f38a347f
crc32: 306EE964
md5: 249ec2396c6016fe543b89856f2c484e
sha1: 72e2b78996a0a26f2b87f953a6814221df0c6d9b
sha256: d2d69303af64e60a6a9efdfca913b38faac0ec7746ace4ff6324cd65f38a347f
sha512: ca1843e54997bc8b833a0f472d9e03abc42c3c79febc36bb32011240d3e81b2da96f993a9905e1a8fadbcff00ae5d6b1c3d516a930d9fa4e9c8783eb189bcbbb
ssdeep: 3072:RTglpbRcieEDLQ4TcBQvpK84BnZ1K7OIZ8YgLGLvCC6dzCxLIDfkTs:W+4hvP4BZ1KT8YgLGG
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15914AE72B30A9452F69E46718831C1AD4BF4BC4498A542237ACDAFCB5DBF2C45F3A742
sha3_384: f8bb69089dbfa66933cacb6089db6ef02a4d578dc120ac23882ad83aadf3ffd9ab2e5d2d546d8fb4f3da0075c7d26ad8
ep_bytes: 00000000000000000000000000000000
timestamp: 2013-05-24 08:15:24

Version Info:
0: [No Data]

Win32:Kryptik-LUP [Trj] also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
CAT-QuickHeal	TrojanDropper.Gepys.A
Skyhigh	BehavesLike.Win32.Generic.dh
Malwarebytes	Generic.Malware.AI.DDS
K7GW	Riskware ( 00584baa1 )
Baidu	Win32.Trojan-Dropper.Gepys.a
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Packed.ZBot-7727233-1
Avast	Win32:Kryptik-LUP [Trj]
Sophos	ML/PE-A
Ikarus	Trojan.CryptEVB
GData	Win32.Trojan.Agent.0ZNUUU
Antiy-AVL	Trojan/Win32.Zbot
Kingsoft	malware.kb.a.996
Xcitium	TrojWare.Win32.Kryptik.BBQP@4yhysc
Microsoft	Trojan:Win32/Zbot.SIBL!MTB
Google	Detected
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BH01AL24
Rising	Trojan.Zbot!8.1C74 (TFE:1:pLfvngcoIMP)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Kryptik-LUP [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32:Kryptik-LUP [Trj]?

Win32:Kryptik-LUP [Trj] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X