How to remove “Win32/Kryptik.FAGZ”?

The Win32/Kryptik.FAGZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.FAGZ virus can do?

Executable code extraction
Creates RWX memory
Installs itself for autorun at Windows startup

How to determine Win32/Kryptik.FAGZ?


File Info:
crc32: E2F8D273
md5: af4beaa70a99fc1c48bf1694e4e17d9e
name: AF4BEAA70A99FC1C48BF1694E4E17D9E.mlw
sha1: 29a6756336db053d98f52a308547e09730df8106
sha256: 3ba5dad9a1074c48a578eb66d07009fe8921e0f75cc4dc9e799ba8de3e8d5975
sha512: 447a879b2a85d988cd0cb05ba29356bce56b19d6888a3e49982e9d06a562043e454bc49ed7d9cc9891c500a2289eb2d56fb66087bfb9eb29ca9a4a5950c41d2b
ssdeep: 6144:7umI9iH4MvLzvBZ/a7yfvvBxISoS/80LVSzffaTWBqKOqBuD:dI95sX/0yfvvHI1S/82VSzfiWB0x
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 Quillworts Forum
InternalName: inertness
FileVersion: 5.7.1454.0
CompanyName: Quillworts Forum
ProductName: inertness dogbody kin
ProductVersion: 5.7.1454.0
FileDescription: inertness smurr nnw
OriginalFilename: inertness.exe
Translation: 0x0409 0x04b0

Win32/Kryptik.FAGZ also known as:

K7AntiVirus	Trojan ( 0051dbd81 )
Lionic	Trojan.Win32.Generic.4!c
ALYac	Gen:Heur.Mint.Titirez.xm0@Ieq4aEm
Cylance	Unsafe
K7GW	Trojan ( 0051dbd81 )
Cybereason	malicious.70a99f
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.FAGZ
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.Zerber.fgws
BitDefender	Gen:Heur.Mint.Titirez.xm0@Ieq4aEm
NANO-Antivirus	Trojan.Win32.Zerber.evisbp
MicroWorld-eScan	Gen:Heur.Mint.Titirez.xm0@Ieq4aEm
Tencent	Win32.Trojan.Zerber.Lorr
Ad-Aware	Gen:Heur.Mint.Titirez.xm0@Ieq4aEm
Sophos	Mal/Generic-S
Comodo	Malware@#wr1zf5nmsh10
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Ransomware-GIX!AF4BEAA70A99
FireEye	Generic.mg.af4beaa70a99fc1c
Emsisoft	Gen:Heur.Mint.Titirez.xm0@Ieq4aEm (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Ransom:Win32/Cerber.A
Arcabit	Trojan.Mint.Titirez.ED6E36
ZoneAlarm	Trojan-Ransom.Win32.Zerber.fgws
GData	Gen:Heur.Mint.Titirez.xm0@Ieq4aEm
Acronis	suspicious
McAfee	Ransomware-GIX!AF4BEAA70A99
MAX	malware (ai score=99)
VBA32	Trojan-Ransom.Zerber
Panda	Trj/GdSda.A
Rising	Trojan.Generic@ML.100 (RDML:FZKgf7ffdzkupm+cN7sLQA)
Ikarus	Trojan.Win32.Crypt
Fortinet	W32/Kryptik.EYKI!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Cerber.HgIASOoA

How to remove Win32/Kryptik.FAGZ?

Win32/Kryptik.FAGZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X