Malware

Win32/Kryptik.FTMV removal guide

Malware Removal

The Win32/Kryptik.FTMV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.FTMV virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial binary language: Russian
  • Unconventionial language used in binary resources: Russian
  • Anomalous binary characteristics

How to determine Win32/Kryptik.FTMV?


File Info:

crc32: D70F1CBF
md5: bdbea0c6fa86710b877e34966580ccf4
name: BDBEA0C6FA86710B877E34966580CCF4.mlw
sha1: 28d503f17b612776d8e14c2735501acead3bdf6b
sha256: 3921be891cf7370af83a4e3a5cc05e4165ceb34ba54250cfd6af308446f668d4
sha512: 47004d985f0970a3115afab64f502e5bc48fca49f0493f5a46cf61ea220f866c15e7e80040f713bbdb1cae8673c0f2bce857f51afc010c6df981ad0aa9f7f02a
ssdeep: 12288:q9SIkhlJ6lgyGwlNg5wjY3eFfuI/em+9dGzA:TPh2lgyGwlNgMY3eFmv2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2017
InternalName: TemplatelExeFile.rc
FileVersion: 1.0.0.1
CompanyName: TODO:
ProductName: TODO:
ProductVersion: 1.0.0.1
FileDescription: TODO:
OriginalFilename: TemplatelExeFile.rc
Translation: 0x0419 0x04b0

Win32/Kryptik.FTMV also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00528e801 )
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.ClipBanker.215
CAT-QuickHealSoftwareBundler.Prepscram.A7
ALYacGen:Variant.ClipBanker.215
MalwarebytesGeneric.Trojan.Bundler.DDS
ZillyaAdware.StartSurf.Win32.126758
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaAdWare:Win32/StartSurf.f85f4183
K7GWTrojan ( 0050f44b1 )
Cybereasonmalicious.6fa867
BitDefenderThetaGen:NN.ZexaF.34608.Ry0@a8fnMlok
CyrenW32/S-10b1690a!Eldorado
SymantecTrojan.Gen.6
ESET-NOD32a variant of Win32/Kryptik.FTMV
APEXMalicious
AvastFileRepMetagen [Adw]
CynetMalicious (score: 90)
Kasperskynot-a-virus:AdWare.Win32.StartSurf.abpz
BitDefenderGen:Variant.ClipBanker.215
NANO-AntivirusRiskware.Win32.StartSurf.epsnxd
ViRobotAdware.Zusy.706560.Y
SUPERAntiSpywarePUP.Bundler/Variant
TencentMalware.Win32.Gencirc.10b2db61
Ad-AwareGen:Variant.ClipBanker.215
SophosGeneric PUA CI (PUA)
ComodoApplication.Win32.IStartSurf.BS@7lng48
DrWebTrojan.Vittalia.12815
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.jm
FireEyeGeneric.mg.bdbea0c6fa86710b
EmsisoftGen:Variant.ClipBanker.215 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1103317
eGambitUnsafe.AI_Score_99%
MicrosoftSoftwareBundler:Win32/Prepscram
AegisLabRiskware.Win32.Generic.1!c
GDataGen:Variant.ClipBanker.215
AhnLab-V3PUP/Win32.StartSurf.R204081
Acronissuspicious
McAfeePUP-XBS-KX
MAXmalware (ai score=80)
VBA32AdWare.StartSurf
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.AB1C (CLOUD)
YandexTrojan.GenAsa!IRcZAhjZ7uU
IkarusPUA.Bundler
FortinetW32/Kryptik.GGTA!tr
AVGFileRepMetagen [Adw]
Paloaltogeneric.ml
Qihoo-360Win32/Adware.Generic.HwoCFikA

How to remove Win32/Kryptik.FTMV?

Win32/Kryptik.FTMV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment