Should I remove “Win32/Kryptik.DNJD”?

The Win32/Kryptik.DNJD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.DNJD virus can do?

• Creates RWX memory
• Anomalous file deletion behavior detected (10+)
• Dynamic (imported) function loading detected
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• Drops a binary and executes it
• Unconventionial language used in binary resources: Norwegian (Bokmal)
• Authenticode signature is invalid
• Attempts to modify proxy settings
• Anomalous binary characteristics

How to determine Win32/Kryptik.DNJD?

File Info:
name: E54EBE6B8F30B8C9936F.mlw
path: /opt/CAPEv2/storage/binaries/3c5a7885cdac339d941f4d2ae8687550c8e00fcad3b937acd7323a8416fdc6c4
crc32: 4E5751A3
md5: e54ebe6b8f30b8c9936fb0a0204e6652
sha1: cced254a551f27874c945b892080123f9b4f1a5b
sha256: 3c5a7885cdac339d941f4d2ae8687550c8e00fcad3b937acd7323a8416fdc6c4
sha512: 67ff40548913df38e057b43cecea33d36498e6834b6b3a42bfaa8ad36305b58050d172c7856eca47d95415ce0f98553efa3eb39d91305e967f7511b87a229196
ssdeep: 768:TrZcirL1NRgYHACTE81LrKcfIhx2o4mSpccuIhRoX6yS:Tre61sYHACTl1LrKeqxF4mSiLIhRM6Z
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T116037366FA87BE54E4721E3054A2B971011AFF057D32E9CE28523E355B333C25B72A27
sha3_384: affea137712c6dae9cfa172460627f0d8084701e60d9609f1a4c75dbc2ffec100a4b5f6ee9eebb0f16b5c33acd965e65
ep_bytes: 558bec83ec44a16453400085c0740aff
timestamp: 2013-12-05 16:59:18

Version Info:
CompanyName: Wafe-soft
FileDescription: 
FileVersion: 2.4.0.61
InternalName: 
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: 
ProductName: WafeScan
ProductVersion: 4.61a
Translation: 0x0409 0x04e4

Win32/Kryptik.DNJD also known as:

How to remove Win32/Kryptik.DNJD?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.