Malware

Win32/Kryptik.FEJT removal guide

Malware Removal

The Win32/Kryptik.FEJT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.FEJT virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Injection with SetWindowLong in a remote process
  • Creates RWX memory
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • Network activity detected but not expressed in API logs

How to determine Win32/Kryptik.FEJT?


File Info:

crc32: 905352BE
md5: beb31d049bc8153b4358557dfc6615aa
name: BEB31D049BC8153B4358557DFC6615AA.mlw
sha1: 438a7479505279758150e1bf0ba9e335177597ab
sha256: 214e039f748ed893ae9c8c54f64c78898016ba7f2c09661a69fb3eb1a2936b1a
sha512: 02825023d06ed08214c6c1c367ebcc493ec21782602018e7945c158b56c4258735c9f134789be75d299ae46b045e9dcf9a6d53ad317b3a48aaf7f8b8d6ef778d
ssdeep: 6144:TWJ0Af+20IGiWZ2ftwBO53wxHZSaxXXed0mq6XJaRG2:TWJ0Q+Ftk6xed0m7Za7
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyrightxa9 2005-2015
InternalName:
FileVersion: 5.0.3.0
CompanyName: IObit
LegalTrademarks: IObit
Comments:
ProductName: UninstallMonitor
ProductVersion: 5.0.1.0
FileDescription: IObit Uninstaller 5 UninstallMontior
OriginalFilename:
Translation: 0x0409 0x04e4

Win32/Kryptik.FEJT also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005224381 )
Elasticmalicious (high confidence)
DrWebTrojan.KillProc.54635
CynetMalicious (score: 100)
ALYacTrojan.Ransom.Cerber.1
CylanceUnsafe
ZillyaTrojan.Kryptik.Win32.2073476
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Viknok.5ff43174
K7GWTrojan ( 0051c8ad1 )
Cybereasonmalicious.49bc81
BaiduWin32.Trojan.Kryptik.alb
CyrenW32/Cerber.CE.gen!Eldorado
SymantecPacked.Generic.459
ESET-NOD32a variant of Win32/Kryptik.FEJT
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan.Win32.Vucha.dc
BitDefenderTrojan.Ransom.Cerber.1
NANO-AntivirusTrojan.Win32.Vucha.evrttr
MicroWorld-eScanTrojan.Ransom.Cerber.1
TencentWin32.Trojan.Generic.Pjxb
Ad-AwareTrojan.Ransom.Cerber.1
SophosML/PE-A + Mal/Ransom-EJ
ComodoTrojWare.Win32.Kryptik.ERJ@6l0vie
BitDefenderThetaGen:NN.ZexaF.34722.uq0@aK02znkj
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_CERBER.SMEJ7
McAfee-GW-EditionBehavesLike.Win32.Ransomware.fc
FireEyeGeneric.mg.beb31d049bc8153b
EmsisoftTrojan.Ransom.Cerber.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Vucha.bhd
AviraHEUR/AGEN.1129194
eGambitUnsafe.AI_Score_94%
Antiy-AVLTrojan/Generic.ASMalwS.22EF858
MicrosoftTrojan:Win32/Viknok.B
ArcabitTrojan.Ransom.Cerber.1
GDataTrojan.Ransom.Cerber.1
AhnLab-V3Win-Trojan/Cerber.Gen
Acronissuspicious
McAfeeTrojan-FORL!BEB31D049BC8
MAXmalware (ai score=100)
VBA32BScope.TrojanPSW.Papras
PandaTrj/CI.A
TrendMicro-HouseCallRansom_CERBER.SMEJ7
RisingTrojan.Kryptik!1.AE9C (CLASSIC)
YandexTrojan.GenAsa!WtVq00nAUZY
IkarusVirus.Win32.CeeInject
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Dridex.DD!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Win32/Kryptik.FEJT?

Win32/Kryptik.FEJT removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment