1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar







Win32.Crypto is an interesting virus from technical point of view, but it's not spreading in the wild and thus not a cause of concern for the end users.

Crypto infects EXE and DLL files and spreads when these are exchanged between machines.

The most interesting part of the virus is that it encrypts data on the hard drive with real-time on-the-fly encryption. So, if you remove the virus, your data is left encrypted. Encryption is done with Microsoft's CryptoAPI.

Disinfection & Removal

Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.

Submit a sample

Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.