What is “Win32/Kryptik.AJQI”?

The Win32/Kryptik.AJQI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.AJQI virus can do?

At least one process apparently crashed during execution
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/Kryptik.AJQI?


File Info:
name: E04B2F777CC92F5EECDC.mlw
path: /opt/CAPEv2/storage/binaries/020ae06d15c91bbadf9b58659fd7ada6604e2668464ebea40cfa0fb1c2ff7d5a
crc32: 3E0F7423
md5: e04b2f777cc92f5eecdc3d2677d9d7e4
sha1: 773fee8ea35a5c3e4911c3da564db424584425c0
sha256: 020ae06d15c91bbadf9b58659fd7ada6604e2668464ebea40cfa0fb1c2ff7d5a
sha512: 26734b4edc53a454e8d535a5c8af868fb0ab0d05857863ac8d37bf3845ab5f09244d691f05e32d19e6e398a46ed045c07d4f76751d80e4604601bd57abb2ad86
ssdeep: 3072:rVPgVpzw4GJbWqHhy0DJhmH09M8MwGWMja5Q9LQg0mOL24ZszHBWVLmpPEh3yluU:BPVWqHIEu09MbokQgs1AHBWV6NYyluU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1ED24BFC3D5248012F426A934EB10DDE791ACFB353F949365721E6E78EC58DF02722BA6
sha3_384: f7346f620b03a4abaed1a330703082babb5297f2b77e64c2b7909c998dbb9c51a5ccc5b2f1a1d3ef8097c487d6ad4f4f
ep_bytes: 8b056450430083f05c4805ca00000089
timestamp: 2011-03-15 00:52:12

Version Info:
CompanyName: Promise Technology, Inc.
FileDescription: Froze Labs Edit
FileVersion: 5.1
InternalName: Jumbo Behind Raged
OriginalFilename: Lohgnrvus7xed.exe
ProductName: Beefy
ProductVersion: 5.1
Translation: 0x0409 0x04b0

Win32/Kryptik.AJQI also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.46754
FireEye	Generic.mg.e04b2f777cc92f5e
CAT-QuickHeal	TrojanPWS.Zbot.Y
ALYac	Gen:Variant.Razy.46754
Malwarebytes	Malware.AI.1722719767
Zillya	Trojan.Kryptik.Win32.879564
K7AntiVirus	Trojan ( 00486ca91 )
Alibaba	Trojan:Win32/Kryptik.4df68342
K7GW	Trojan ( 00486ca91 )
Cybereason	malicious.77cc92
Arcabit	Trojan.Razy.DB6A2
BitDefenderTheta	Gen:NN.ZexaF.34212.ny1@aay8k5hi
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.AJQI
TrendMicro-HouseCall	Trojan.Win32.DYNAMER.AI
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Razy.46754
NANO-Antivirus	Trojan.Win32.Panda.vqjua
Avast	Win32:Reveton-Y [Trj]
Tencent	Malware.Win32.Gencirc.10bf98b1
Ad-Aware	Gen:Variant.Razy.46754
Emsisoft	Gen:Variant.Razy.46754 (B)
Comodo	Malware@#1md8rbazsarn0
F-Secure	Trojan.TR/Crypt.XPACK.Gen
VIPRE	Trojan.Win32.Reveto.D (v)
McAfee-GW-Edition	BehavesLike.Win32.MultiPlug.dh
Sophos	Mal/Generic-R + Mal/EncPk-ABFU
Ikarus	Trojan.Win32.Ransom
Jiangmin	Trojan.Generic.abdls
MaxSecure	Trojan.Malware.7164915.susgen
Avira	TR/Crypt.XPACK.Gen
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.Unknown
Microsoft	PWS:Win32/Zbot!ml
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Razy.46754
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C4363055
Acronis	suspicious
McAfee	GenericR-HJY!E04B2F777CC9
TACHYON	Trojan/W32.Agent.224768.LL
VBA32	BScope.Trojan.Bitrep
APEX	Malicious
Rising	Spyware.Zbot!8.16B (CLOUD)
Yandex	Trojan.GenAsa!DLSktYH9T8c
SentinelOne	Static AI – Malicious PE
eGambit	Generic.Malware
Fortinet	W32/Kryptik.ABC!tr
Webroot	W32.Malware.Gen
AVG	Win32:Reveton-Y [Trj]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32/Kryptik.AJQI?

Win32/Kryptik.AJQI removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X