Malware

About “Win32/Kryptik.FPGV” infection

Malware Removal

The Win32/Kryptik.FPGV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.FPGV virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Win32/Kryptik.FPGV?


File Info:

crc32: 90C39C8C
md5: b871a11d030ef30d97ed714d54a8e79e
name: B871A11D030EF30D97ED714D54A8E79E.mlw
sha1: 0593576dd01b2a2be5d76b17c3d1bc2862cd2953
sha256: 5ab9b586eaf1bcaa76443b4f69d67e57a057d57cb30b6d863a7cfab3d0882c2a
sha512: 582ce36e390fc950929665f9fe9ceae85a57dfc94ebf8ea1e1d4c6648b5e79a285b182e94b0a7f14ce06e6e30ceb23fadb364345d158dafbd703ea3fe5b660f5
ssdeep: 768:3fcqgcXfHVHm4aQ4HezM+d0wYvsGCt2HMdGNvOTBMNIJD:z3X/VIBHcM+d0wYkxEMdL
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Kryptik.FPGV also known as:

BkavW32.Common.66BC64E2
K7AntiVirusTrojan ( 00515aa21 )
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Siggen1.62741
CynetMalicious (score: 100)
CAT-QuickHealRansom.Exxroute.A4
ALYacTrojan.Ransom.Spora
CylanceUnsafe
ZillyaTrojan.Kryptik.Win32.1152032
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/Spora.68ecd750
K7GWTrojan ( 00507f831 )
Cybereasonmalicious.d030ef
CyrenW32/S-26bbd9ea!Eldorado
SymantecRansom.Spora
ESET-NOD32a variant of Win32/Kryptik.FPGV
APEXMalicious
AvastWin32:Filecoder-BD [Trj]
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderGen:Variant.Symmi.73169
NANO-AntivirusTrojan.Win32.Kryptik.emerja
MicroWorld-eScanGen:Variant.Symmi.73169
TencentMalware.Win32.Gencirc.10b58b36
Ad-AwareGen:Variant.Symmi.73169
SophosML/PE-A + Mal/Elenoocka-E
ComodoMalware@#2jgz77av32f9o
BitDefenderThetaGen:NN.ZexaF.34628.eqW@aqC0OKhk
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_SPORA.AX
McAfee-GW-EditionBehavesLike.Win32.Generic.km
FireEyeGeneric.mg.b871a11d030ef30d
EmsisoftGen:Variant.Symmi.73169 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Spora.ky
WebrootTrojan.Dropper.Ransom.Gen
AviraHEUR/AGEN.1105007
eGambitUnsafe.AI_Score_89%
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftRansom:Win32/Spora.A
ArcabitTrojan.Symmi.D11DD1
GDataGen:Variant.Symmi.73169
TACHYONRansom/W32.Spora.69632.L
AhnLab-V3Trojan/Win32.Spora.R196340
Acronissuspicious
McAfeeRansom-Spora!B871A11D030E
MAXmalware (ai score=100)
VBA32BScope.Backdoor.IRCNite
MalwarebytesRansom.MalPack
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_SPORA.AX
RisingRansom.Genasom!8.293 (KTSE)
YandexTrojan.GenAsa!6VHX4yy5PE0
IkarusTrojan-Ransom.Spora
FortinetW32/Kryptik.GKKB!tr
AVGWin32:Filecoder-BD [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Spora.HxQBEpsA

How to remove Win32/Kryptik.FPGV?

Win32/Kryptik.FPGV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment