Win32/Kryptik.AJRF removal guide

The Win32/Kryptik.AJRF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.AJRF virus can do?

At least one process apparently crashed during execution
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/Kryptik.AJRF?


File Info:
name: EF87A1176AA93D3E05D9.mlw
path: /opt/CAPEv2/storage/binaries/03980eeac9524607a225a1c1c5b3f895d922ae1bf427db9291e4d69e954601e8
crc32: BC35254B
md5: ef87a1176aa93d3e05d9da07a08ed718
sha1: 5f7b7ff171a55ec3663f4b9ad81c8deef7b6efed
sha256: 03980eeac9524607a225a1c1c5b3f895d922ae1bf427db9291e4d69e954601e8
sha512: 07a0e45fd1787a4f2ddd907c6a8c0e8bf09c42ce7b84ccfdffdfc4bfd54211e088b07d718ad32177bb0d8d85749044115a7b2a570cd0facc5b8673efb8ff7b69
ssdeep: 6144:PFImRFWJ3phyPjimwm8oIyDAGkPCbnFY+a+PxbB0JPrfh5qWPf:9ImRSZhymmwm85JDCDFba8xbBEPLhNf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19984EB666A6EBCF5ED7E6270004A14F50D7515C7F93848F888FB2C09FBA98B46C93391
sha3_384: 3009ab38d3b02eb7246d094d9fb6e6ac4a80e15c6ca90da94534a1328830957f67acdea8e1471604091085c73dd56e27
ep_bytes: 8b3d10a043008b1d2ca0430003df893d
timestamp: 2011-01-08 17:32:36

Version Info:
CompanyName: Mach5 Software
FileDescription: Hairy Decor Guys
FileVersion: 6.5
InternalName: Chart Snuff Enema
LegalCopyright: Wants 2002-2007
OriginalFilename: Deck.exe
ProductName: Hexed
ProductVersion: 6.5
Translation: 0x0409 0x04b0

Win32/Kryptik.AJRF also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.ef87a1176aa93d3e
CAT-QuickHeal	TrojanPWS.Zbot.Y
ALYac	Gen:Variant.Razy.893901
Cylance	Unsafe
VIPRE	Trojan.Win32.Reveto.D (v)
Sangfor	Trojan.Win32.Generic.ky
K7AntiVirus	Trojan ( 0055dd191 )
Alibaba	Trojan:Win32/Kryptik.69aaef0a
K7GW	Trojan ( 0055dd191 )
Cybereason	malicious.76aa93
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.AJRF
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Razy.893901
NANO-Antivirus	Trojan.Win32.MlwGen.ehzfmx
SUPERAntiSpyware	Trojan.Agent/Gen-Falint[Cont]
MicroWorld-eScan	Gen:Variant.Razy.893901
Avast	Win32:Reveton-Y [Trj]
Tencent	Malware.Win32.Gencirc.114bca84
Ad-Aware	Gen:Variant.Razy.893901
Emsisoft	Gen:Variant.Razy.893901 (B)
Comodo	Malware@#ty34q64hhvwj
Zillya	Trojan.Kryptik.Win32.886980
TrendMicro	TROJ_FRS.0NA103BL20
McAfee-GW-Edition	GenericRXKH-QC!EF87A1176AA9
Sophos	Mal/Generic-S + Mal/EncPk-ABFO
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Razy.893901
Jiangmin	Trojan.Generic.yflv
Webroot	W32.Reveto
Avira	TR/Crypt.EPACK.Gen2
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.AGeneric
Arcabit	Trojan.Razy.DDA3CD
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Skeeyah.A!rfn
Acronis	suspicious
McAfee	GenericRXKH-QC!EF87A1176AA9
VBA32	Trojan.Dynamer
Malwarebytes	Malware.AI.744254185
TrendMicro-HouseCall	TROJ_FRS.0NA103BL20
Rising	Trojan.Kryptik!8.8 (CLOUD)
Yandex	Trojan.GenAsa!pxw/qWzjt8U
Ikarus	Trojan-Ransom.Foreign
eGambit	Generic.Malware
Fortinet	W32/Kryptik.ABC!tr
BitDefenderTheta	Gen:NN.ZexaF.34212.xK1@a4RFWnji
AVG	Win32:Reveton-Y [Trj]
Panda	Bck/Qbot.AO
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32/Kryptik.AJRF?

Win32/Kryptik.AJRF removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X