Categories: Malware

Should I remove “Win32/Kryptik.FDPI”?

The Win32/Kryptik.FDPI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.FDPI virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Unconventionial language used in binary resources: Chinese (Simplified)
Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
Installs itself for autorun at Windows startup
Attempts to identify installed AV products by installation directory
Anomalous binary characteristics

How to determine Win32/Kryptik.FDPI?


File Info:
crc32: DFE3BF1Cmd5: afd491a8b40a58cccb214af99cc56e08name: AFD491A8B40A58CCCB214AF99CC56E08.mlwsha1: c205656af1f2964ece2d5d2706ffd9fdcc44a62esha256: 1e8abe73070c7b222e1fabc8fe4aa283c5207a70a40830ca5c6db23fd52109f8sha512: cb531aae88e82e3de9b930464839809faaa7ee47dd3c7556e9117ed00045808cd8ba8e22c6d2511cbd62b3fbd23a2fc9be1180c7d5b247f145207a197812b6c5ssdeep: 6144:iuO82nMenAxxpYSFU7pc1df/emkEtvClN2:iuO8iMUAxXU7pc1d3RC2type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2015 IObit. All Rights Reserved.InternalName: NoteIcon.exeFileVersion: 1.0.0.1CompanyName: IObitProductVersion: 1.0.0.1OriginalFilename: NoteIcon.exeTranslation: 0x0409 0x04b0

Win32/Kryptik.FDPI also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Ransom.Cerber.1
FireEye	Generic.mg.afd491a8b40a58cc
CAT-QuickHeal	Ransom.Cerber.YY2
McAfee	Ransomware-FOS!AFD491A8B40A
Cylance	Unsafe
AegisLab	Hacktool.Win32.Generic.x!c
Sangfor	Ransom.Win32.Cerber_71.se
K7AntiVirus	Trojan ( 005224381 )
BitDefender	Trojan.Ransom.Cerber.1
K7GW	Trojan ( 005224381 )
Baidu	Win32.Trojan.Kryptik.anp
Cyren	W32/S-d7cf0130!Eldorado
APEX	Malicious
Avast	Win32:Evo-gen [Susp]
Cynet	Malicious (score: 100)
Alibaba	Ransom:Win32/Cerber.b2f51a31
NANO-Antivirus	Trojan.Win32.Encoder.evgtqu
Ad-Aware	Trojan.Ransom.Cerber.1
Emsisoft	Trojan.Ransom.Cerber.1 (B)
Comodo	TrojWare.Win32.Kryptik.ERJ@6l0vie
F-Secure	Heuristic.HEUR/AGEN.1129194
DrWeb	Trojan.Encoder.5189
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_HPCERBER.SM2
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dh
Sophos	Mal/Generic-R + Mal/Cerber-B
Ikarus	Trojan.Win32.Filecoder
GData	Trojan.Ransom.Cerber.1
Avira	HEUR/AGEN.1129194
Antiy-AVL	Trojan[Packed]/Win32.Mentiger
Arcabit	Trojan.Ransom.Cerber.1
SUPERAntiSpyware	Trojan.Agent/Gen-Kryptik
ZoneAlarm	HEUR:Packed.Win32.Mentiger.gen
Microsoft	Ransom:Win32/Cerber.A
AhnLab-V3	Win-Trojan/Cerber.Gen
BitDefenderTheta	Gen:NN.ZexaF.34608.rq1@ayVZ@6bb
ALYac	Trojan.Ransom.Cerber.1
MAX	malware (ai score=100)
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Kryptik.FDPI
TrendMicro-HouseCall	Ransom_HPCERBER.SM2
Yandex	Trojan.Kryptik!DDG2TYkDQwo
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Kryptik.HCAW!tr
AVG	Win32:Evo-gen [Susp]
Cybereason	malicious.8b40a5
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Cerber.HgIASOoA