Win64/Kryptik.CBW removal

The Win64/Kryptik.CBW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win64/Kryptik.CBW virus can do?

Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)

How to determine Win64/Kryptik.CBW?


File Info:
crc32: B112C5CF
md5: 43f60c761ce4ca28369ecbce078803ac
name: upload_file
sha1: 8255e0461c80cf328eaca0b0ae882fcd35264b3e
sha256: 2e456fe88ac97e84fe1ef0bdd54d1b982d2251f6ccf2f8d15ded025ca030adbc
sha512: ef20e638a71dc2b2637c8d9c0e25b3c55c88a1d9147d35d9eacb91e8c93d855ec685e3f7cb622744e9969b47c582350bbced5b068c06b4ab1ef16707bf5c9648
ssdeep: 49152:2J3UmnUA2f8ui3OPePWEzn15q6cPedhX0KRBhVEV+PQ2AkTeXktrioldjcgreRKf:evLE8eXk5i6djcmeRK+zu
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: x7248x6743x6240x65e0xff0cx7ffbx7248x4e0dx7a76xff0cx4ec5x4fddx7559x7f72x540dx6743x3002
InternalName: YUVPlayer.exe
FileVersion: 4.0.0.0
CompanyName: x8fdfx601dx5802x5de5x4f5cx5ba4
ProductName: YUVx64adx653ex5668
ProductVersion: 4.0.0.0
FileDescription: YUVPlayer
OriginalFilename: YUVPlayer.exe
Translation: 0x0804 0x04b0

Win64/Kryptik.CBW also known as:

MicroWorld-eScan	Trojan.Agent.EXRN
Qihoo-360	Generic/Trojan.793
McAfee	Trojan-FSYK!43F60C761CE4
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Zenpak.4!c
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Trojan.Agent.EXRN
K7GW	Trojan ( 005711e71 )
K7AntiVirus	Trojan ( 005711e71 )
Invincea	Mal/Generic-S
Symantec	Trojan.Gen.MBT
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Zenpak.axdf
Alibaba	Backdoor:Win64/Bazarldr.d2476647
Rising	Trojan.Kryptik!8.8 (TFE:5:7RgPTWYhcmG)
Ad-Aware	Trojan.Agent.EXRN
Emsisoft	MalCert-S.CU (A)
F-Secure	Trojan.TR/Kryptik.mjgbl
DrWeb	BackDoor.Bazar.17
TrendMicro	TROJ_FRS.VSNW10J20
McAfee-GW-Edition	Artemis!Trojan
FireEye	Trojan.Agent.EXRN
Sophos	Mal/Generic-S
Webroot	W32.Trojan.Bazarloader
Avira	TR/Kryptik.mjgbl
MAX	malware (ai score=82)
Microsoft	Trojan:Win64/Bazarldr.G!MSR
Arcabit	Trojan.Agent.EXRN
ZoneAlarm	Trojan.Win32.Zenpak.axdf
GData	Trojan.Agent.EXRN
ESET-NOD32	a variant of Win64/Kryptik.CBW
ALYac	Trojan.Agent.EXRN
Malwarebytes	Trojan.Bazar
TrendMicro-HouseCall	TROJ_FRS.VSNW10J20
Fortinet	W64/Agent.35F2!tr
AVG	FileRepMalware

How to remove Win64/Kryptik.CBW?

Win64/Kryptik.CBW removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X