Categories: Malware

Win32/Kryptik.AJFJ removal

The Win32/Kryptik.AJFJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.AJFJ virus can do?

Behavioural detection: Executable code extraction – unpacking
SetUnhandledExceptionFilter detected (possible anti-debug)
Creates RWX memory
Dynamic (imported) function loading detected
Reads data out of its own binary image
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Exhibits behavior characteristic of Kelihos malware
Installs itself for autorun at Windows startup
Checks the CPU name from registry, possibly for anti-virtualization

How to determine Win32/Kryptik.AJFJ?


File Info:
name: 1DB17285288C0A12C848.mlwpath: /opt/CAPEv2/storage/binaries/476e8f29439ff4514358b3e1595dee9bfdd81a97f7f21c458e7af59f90375830crc32: 93E5AC40md5: 1db17285288c0a12c848cc2cf5dba6f1sha1: 1d69b7520198d115c5df03dd6edcf9fc89781a75sha256: 476e8f29439ff4514358b3e1595dee9bfdd81a97f7f21c458e7af59f90375830sha512: 22438dc9145b2ca4cf17152be19131a29637ca77c56bb8ec114df38a39e0a81106fb43d4210964bd0beb00870036245fd7f7e3d986d0818da5b14eef1854d95cssdeep: 12288:eLp5WbGcDlZpYj42qveV5HQdIJ3Y0tUmRMJ4wzTwVLPbWa5YB8UJel2QoG51vQnk:wwuES7J3wUMJhzTwdzm8uebp1vQktype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B10523E578C69543C22471B6AD5396FE232FDE502BB1A22629D03EFD6E70A581D40F2Csha3_384: 78236f44a990a201b3ba956d80a7e82b4da31a37b58a3e59325d2f9f4c05f1130e3d8375f67e39e3173883dce7444a66ep_bytes: ff15003040002bd281f200525700fecetimestamp: 2011-03-21 18:21:34
Version Info:
0: [No Data]

Win32/Kryptik.AJFJ also known as:

Lionic	Trojan.Win32.Generic.lmka
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.VIZ.Gen.1
CAT-QuickHeal	FraudTool.Security
ALYac	Trojan.VIZ.Gen.1
Malwarebytes	Trojan.LameShield
VIPRE	Trojan.Win32.Winwebsec.fd (v)
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Trojan.VIZ.Gen.1
K7GW	Trojan ( 005042e61 )
K7AntiVirus	Trojan ( 005042e61 )
Cyren	W32/FakeAlert.UN.gen!Eldorado
Symantec	SecShieldFraud!gen7
ESET-NOD32	a variant of Win32/Kryptik.AJFJ
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Tepfer.wghcv
SUPERAntiSpyware	Trojan.Agent/Gen-Kryptik
Rising	Malware.Heuristic!ET#100% (RDMK:cmRtazoDpdCL9IhQSC15SyMAo2ZN)
Emsisoft	Trojan.VIZ.Gen.1 (B)
Comodo	TrojWare.Win32.Kryptik.AISL@4psha1
DrWeb	BackDoor.Slym.405
TrendMicro	TROJ_KRYPTK.SMJY
McAfee-GW-Edition	BehavesLike.Win32.Generic.cc
FireEye	Generic.mg.1db17285288c0a12
Sophos	ML/PE-A + Mal/FakeAV-RQ
Ikarus	Trojan-PSW.Win32.Tepfer
Jiangmin	Trojan/Generic.aisuy
Webroot	w32.malware.gen
Avira	TR/Symmi.J.1
Antiy-AVL	Trojan/Generic.ASMalwS.2735F6E
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Backdoor:Win32/Kelihos.F
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Trojan.VIZ.Gen.1
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.FakeAV.R33123
McAfee	PWS-Zbot.gen.ain
MAX	malware (ai score=89)
VBA32	Heur.Trojan.Hlux
Cylance	Unsafe
Panda	Adware/SystemTool
TrendMicro-HouseCall	TROJ_KRYPTK.SMJY
Tencent	Win32.Trojan.Agent.Ecaz
Yandex	Trojan.GenAsa!cz/paMmO224
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.AGAI!tr
BitDefenderTheta	Gen:NN.ZexaF.34182.YqW@amFV4Yai
AVG	Win32:FakeAlert-CWA [Trj]
Cybereason	malicious.5288c0
Avast	Win32:FakeAlert-CWA [Trj]