Malware

Should I remove “Win32/Kryptik.FDPI”?

Malware Removal

The Win32/Kryptik.FDPI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.FDPI virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Attempts to identify installed AV products by installation directory
  • Anomalous binary characteristics

How to determine Win32/Kryptik.FDPI?


File Info:

crc32: DFE3BF1C
md5: afd491a8b40a58cccb214af99cc56e08
name: AFD491A8B40A58CCCB214AF99CC56E08.mlw
sha1: c205656af1f2964ece2d5d2706ffd9fdcc44a62e
sha256: 1e8abe73070c7b222e1fabc8fe4aa283c5207a70a40830ca5c6db23fd52109f8
sha512: cb531aae88e82e3de9b930464839809faaa7ee47dd3c7556e9117ed00045808cd8ba8e22c6d2511cbd62b3fbd23a2fc9be1180c7d5b247f145207a197812b6c5
ssdeep: 6144:iuO82nMenAxxpYSFU7pc1df/emkEtvClN2:iuO8iMUAxXU7pc1d3RC2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2015 IObit. All Rights Reserved.
InternalName: NoteIcon.exe
FileVersion: 1.0.0.1
CompanyName: IObit
ProductVersion: 1.0.0.1
OriginalFilename: NoteIcon.exe
Translation: 0x0409 0x04b0

Win32/Kryptik.FDPI also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Ransom.Cerber.1
FireEyeGeneric.mg.afd491a8b40a58cc
CAT-QuickHealRansom.Cerber.YY2
McAfeeRansomware-FOS!AFD491A8B40A
CylanceUnsafe
AegisLabHacktool.Win32.Generic.x!c
SangforRansom.Win32.Cerber_71.se
K7AntiVirusTrojan ( 005224381 )
BitDefenderTrojan.Ransom.Cerber.1
K7GWTrojan ( 005224381 )
BaiduWin32.Trojan.Kryptik.anp
CyrenW32/S-d7cf0130!Eldorado
APEXMalicious
AvastWin32:Evo-gen [Susp]
CynetMalicious (score: 100)
AlibabaRansom:Win32/Cerber.b2f51a31
NANO-AntivirusTrojan.Win32.Encoder.evgtqu
Ad-AwareTrojan.Ransom.Cerber.1
EmsisoftTrojan.Ransom.Cerber.1 (B)
ComodoTrojWare.Win32.Kryptik.ERJ@6l0vie
F-SecureHeuristic.HEUR/AGEN.1129194
DrWebTrojan.Encoder.5189
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_HPCERBER.SM2
McAfee-GW-EditionBehavesLike.Win32.Dropper.dh
SophosMal/Generic-R + Mal/Cerber-B
IkarusTrojan.Win32.Filecoder
GDataTrojan.Ransom.Cerber.1
AviraHEUR/AGEN.1129194
Antiy-AVLTrojan[Packed]/Win32.Mentiger
ArcabitTrojan.Ransom.Cerber.1
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
ZoneAlarmHEUR:Packed.Win32.Mentiger.gen
MicrosoftRansom:Win32/Cerber.A
AhnLab-V3Win-Trojan/Cerber.Gen
BitDefenderThetaGen:NN.ZexaF.34608.rq1@ayVZ@6bb
ALYacTrojan.Ransom.Cerber.1
MAXmalware (ai score=100)
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.FDPI
TrendMicro-HouseCallRansom_HPCERBER.SM2
YandexTrojan.Kryptik!DDG2TYkDQwo
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_100%
FortinetW32/Kryptik.HCAW!tr
AVGWin32:Evo-gen [Susp]
Cybereasonmalicious.8b40a5
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Cerber.HgIASOoA

How to remove Win32/Kryptik.FDPI?

Win32/Kryptik.FDPI removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment