How to remove “Win32/Kryptik.FISW”?

The Win32/Kryptik.FISW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.FISW virus can do?

Executable code extraction
Creates RWX memory
Anomalous binary characteristics

How to determine Win32/Kryptik.FISW?


File Info:
crc32: CCDC6241
md5: 2ea1b7590b2e94e3c0fd4b1448b3a400
name: 2EA1B7590B2E94E3C0FD4B1448B3A400.mlw
sha1: 412ac979283c75cbb6cdaa77f4b74f6a11a6fe33
sha256: 8ea2bc17b3ab0f5f21d4627831a15452474f028fe9ae692aa9a393f124a53f23
sha512: 479b9dddc257dc7d276cac456c065491e991d39338b424dbd8dbdfbee7ca536d36b77a294676357677ad2fefde446e029da7949af0339a5b58c42a126458ba23
ssdeep: 3072:unYKeFEfntyr/FBl19Qys9Zn/YS87Dlr1IaDAoKXLFGJMxiCzx:unA0ngrtJ9Qy+/M7Jy5Gq
type: MS-DOS executable, MZ for MS-DOS

Version Info:
LegalCopyright: xa9 Polymyositis Meg
InternalName: teughest
FileVersion: 4.6.0.0
CompanyName: Polymyositis Meg
ProductName: teughest irksomenesses
ProductVersion: 4.6.0.0
FileDescription: teughest powderiest
OriginalFilename: teughest.exe
Translation: 0x0409 0x04b0

Win32/Kryptik.FISW also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0052964f1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.4794
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 0052964f1 )
Cybereason	malicious.9283c7
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.FISW
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Ransomware.Cerber-7783368-0
Kaspersky	Trojan-Ransom.Win32.Zerber.gre
NANO-Antivirus	Trojan.Win32.Zerber.ezipln
ViRobot	Trojan.Win32.Cerber.146171
Tencent	Win32.Trojan.Zerber.Huzp
Sophos	ML/PE-A + Mal/Cerber-C
BitDefenderTheta	Gen:NN.ZexaF.34678.kq0@au8@NPdi
McAfee-GW-Edition	BehavesLike.Win32.Infected.cm
FireEye	Generic.mg.2ea1b7590b2e94e3
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Zerber.lb
Avira	TR/Crypt.XPACK.Gen
eGambit	Unsafe.AI_Score_69%
Microsoft	Ransom:Win32/Cerber!rfn
Acronis	suspicious
McAfee	Ransomware-GIX!2EA1B7590B2E
MAX	malware (ai score=99)
VBA32	Hoax.Zerber
Malwarebytes	Malware.Heuristic.1003
Panda	Trj/GdSda.A
Rising	Malware.Heuristic!ET#93% (RDMK:cmRtazq2pzQwUUA4YyfDD7ltGnEV)
Ikarus	Packer.Win32.Krap
Fortinet	W32/Kryptik.EYKI!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Cerber.HxMBEpsA

How to remove Win32/Kryptik.FISW?

Win32/Kryptik.FISW removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X