About “Win32:Tescrypt-C [Trj]” infection

The Win32:Tescrypt-C [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:Tescrypt-C [Trj] virus can do?

Anomalous binary characteristics

How to determine Win32:Tescrypt-C [Trj]?


File Info:
crc32: 166A8D41
md5: f6b367bd5f8cf3c204e774d38f28131a
name: F6B367BD5F8CF3C204E774D38F28131A.mlw
sha1: 5874674ab04b2bf312d78f94fae01e8d87e02b6b
sha256: d4b14b70ba39aa0f1fb791cda0fe16a267f71c4066fcc5ada2b610123f6d6703
sha512: 7a0753c26fffe58dacda2601a4b033e9fd12f86d1f69ca60ae4fdd9b6a7ef6d15f5f43966741f487499f823f4b645b7520513b68cb8b1f4bc98a43d5308c6b58
ssdeep: 6144:gL8v517s2jHHZMIHr1u7gF+5mKRgZY9FYV7PcP8wy:08v5Fs2jZMSr1u7gw5mK2ZY9CV7PcUL
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32:Tescrypt-C [Trj] also known as:

K7AntiVirus	Trojan ( 004b6e851 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Siggen1.30255
ClamAV	Win.Trojan.Zusy-9759417-0
Cylance	Unsafe
Zillya	Backdoor.Androm.Win32.15962
CrowdStrike	win/malicious_confidence_60% (D)
K7GW	Trojan ( 004b6e851 )
Cybereason	malicious.d5f8cf
Symantec	Trojan.Gen.MBT
APEX	Malicious
Avast	Win32:Tescrypt-C [Trj]
Tencent	Malware.Win32.Gencirc.10b5fe44
VIPRE	Trojan.Win32.Generic.pak!cobra
McAfee-GW-Edition	BehavesLike.Win32.Trojan.fh
FireEye	Generic.mg.f6b367bd5f8cf3c2
SentinelOne	Static AI – Suspicious PE
Antiy-AVL	Trojan/Generic.ASMalwS.E70946
Microsoft	Trojan:Win32/Ditertag.A
AhnLab-V3	Trojan/Win32.Kryptik.R135126
McAfee	Artemis!F6B367BD5F8C
MAX	malware (ai score=99)
Malwarebytes	Malware.AI.3945274210
Rising	Trojan.Generic@ML.91 (RDML:bI2GqPX8tWUsrCF9wnIC2g)
Ikarus	Trojan.Win32.Injector
AVG	Win32:Tescrypt-C [Trj]
Paloalto	generic.ml

How to remove Win32:Tescrypt-C [Trj]?

Win32:Tescrypt-C [Trj] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X