Malware

About “Win32/Kryptik.FZJG” infection

Malware Removal

The Win32/Kryptik.FZJG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.FZJG virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Anomalous binary characteristics

Related domains:

all.fingersleep.bid
none.coalrate.men

How to determine Win32/Kryptik.FZJG?


File Info:

crc32: 9BBD9D59
md5: 05887d2754bb94d39d0ecb668ea4058c
name: 05887D2754BB94D39D0ECB668EA4058C.mlw
sha1: 972e7f3566b09c82b76752ea25fe5b2e669225ed
sha256: dce4d2b1680d1fc39ce6018d85deb9abdd548e3a3a806742df5ac1b70b24420f
sha512: 74b0d9aecdd156bf3b16771596e2c387170cf87f67d5cda26d1903053daf581f0366c6cca0387702935b0737e85a5861f3f16014b1c632e0c6fec21fcc367e0d
ssdeep: 24576:L7lGITcqMYd1VcDIiM836V9z0zaZs/W7uZF6b1ryrXepWapzKeNq:L7lGIgW/5npbeg1ryK5z0
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9Aehm yrnityuco
InternalName: DULEELAL.EXE
FileVersion: 3.1.3.1
CompanyName: xa9Aehm yrnityuco
ProductName: DULEELAL
ProductVersion: 3.1.3.1
OriginalFilename: duleelal.exe
Translation: 0x0409 0x04e4

Win32/Kryptik.FZJG also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Vittalia.13656
CAT-QuickHealSwbndlr.Dlhelper.V2
ALYacApplication.Bundler.iStartSurf.1.Gen
CylanceUnsafe
ZillyaAdware.Generic.Win32.35503
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaAdWare:Win32/Kryptik.11b28e45
K7GWTrojan ( 00516fdf1 )
K7AntiVirusTrojan ( 00516fdf1 )
CyrenW32/S-9c333c44!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.FZJG
APEXMalicious
AvastWin32:Adware-gen [Adw]
CynetMalicious (score: 100)
Kasperskynot-a-virus:HEUR:AdWare.Win32.Generic
BitDefenderApplication.Bundler.iStartSurf.1.Gen
NANO-AntivirusRiskware.Win32.StartSurf.ffqlkz
MicroWorld-eScanApplication.Bundler.iStartSurf.1.Gen
TencentMalware.Win32.Gencirc.10ba5087
Ad-AwareApplication.Bundler.iStartSurf.1.Gen
SophosGeneric PUA JH (PUA)
ComodoApplication.Win32.Dlhelper.GI@8159ae
BitDefenderThetaGen:NN.ZexaF.34170.tr0@aulzqQfi
McAfee-GW-EditionBehavesLike.Win32.Rootkit.tm
FireEyeGeneric.mg.05887d2754bb94d3
EmsisoftApplication.Bundler.iStartSurf.1.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.StartSurf.cca
AviraTR/Crypt.XPACK.Gen4
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.2711CC8
MicrosoftTrojan:Win32/Wacatac.A!ml
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.Generic
GDataApplication.Bundler.iStartSurf.1.Gen
AhnLab-V3HackTool/Win32.Crack.R232335
Acronissuspicious
McAfeePacked-FKC!05887D2754BB
MAXmalware (ai score=73)
VBA32BScope.AdWare.StartSurf
MalwarebytesAdware.DLAssistant
PandaTrj/GdSda.A
RisingTrojan.Kryptik!1.B33C (CLASSIC)
YandexTrojan.GenAsa!lBbf44RSy8g
IkarusPUA.Win32.Prepscram
FortinetW32/GenKryptik.CFOO!tr
AVGWin32:Adware-gen [Adw]
Paloaltogeneric.ml

How to remove Win32/Kryptik.FZJG?

Win32/Kryptik.FZJG removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment