Malware

About “Heur.Krypt.69” infection

Malware Removal

The Heur.Krypt.69 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Heur.Krypt.69 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Heur.Krypt.69?


File Info:

name: 476F60B188A8E6CBADA8.mlw
path: /opt/CAPEv2/storage/binaries/1811c36ec803afaa104b18ca23b71a9702f78ac98004a83b079a51f9bcf734f9
crc32: AA230503
md5: 476f60b188a8e6cbada85c05f406431d
sha1: 098a905fa8e14c5550b6deaff108b4463c26d050
sha256: 1811c36ec803afaa104b18ca23b71a9702f78ac98004a83b079a51f9bcf734f9
sha512: 3edb2ab148657ca2aa699f58f21f6c05ba4544bfe97672e8cec5e745a7851372d3a591c173c5c69317d79a2592eaa9ac98f541a32f03acf4657aa116acfb676c
ssdeep: 384:j6VjthxFJuepDy+2+i5nUgw7cKxNhbOeJgG0bqmXK:eVjtfY1+i5b2xNVRK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13A92D0ECE242A8D1D19242B14DE73525BF6D2D501394C6EE1DA72A8E27170740C97AA7
sha3_384: 55fb2a0a81e5ab97feafa01643a8ffb1995cff7dd57147398007d793bae4ae46ff453db0fd218ac9f942ed5839344b72
ep_bytes: 576838354000e899fdffff8b7c240c59
timestamp: 2010-10-02 11:47:23

Version Info:

0: [No Data]

Heur.Krypt.69 also known as:

BkavW32.AIDetectMalware
LionicHacktool.Win32.TDSS.lhWA
tehtrisGeneric.Malware
DrWebBackDoor.Tdss.8262
MicroWorld-eScanGen:Heur.Krypt.69
FireEyeGeneric.mg.476f60b188a8e6cb
McAfeeGeneric Dropper.va.gen.b
ZillyaRootkit.TDSS.Win32.10437
SangforTrojan.Win32.Olmarik.AFF
K7AntiVirusRootKit ( 0055e3f41 )
AlibabaTrojan:Win32/Olmarik.4482382f
K7GWRootKit ( 0055e3f41 )
CrowdStrikewin/malicious_confidence_90% (D)
ArcabitTrojan.Krypt.69
CyrenW32/Alureon.AM.gen!Eldorado
SymantecHacktool.Rootkit
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Olmarik.AFF
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Heur.Krypt.69
NANO-AntivirusTrojan.Win32.TDSS.lkgfx
AvastWin32:Alureon-IU [Trj]
EmsisoftGen:Heur.Krypt.69 (B)
F-SecureTrojan.TR/Rootkit.Gen
VIPREGen:Heur.Krypt.69
TrendMicroTROJ_AGENTT.SMC
McAfee-GW-EditionGeneric Dropper.va.gen.b
Trapminemalicious.high.ml.score
SophosMal/TDSSPack-A
SentinelOneStatic AI – Suspicious PE
JiangminRootkit.TDSS.eqm
AviraTR/Rootkit.Gen
MAXmalware (ai score=100)
Antiy-AVLTrojan/Win32.AGeneric
XcitiumTrojWare.Win32.Olmarik.AFF@4x1twf
MicrosoftTrojan:WinNT/Alureon.L
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Heur.Krypt.69
GoogleDetected
VBA32Rootkit.TDSS
Cylanceunsafe
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_AGENTT.SMC
RisingTrojan.Toga!8.136D (TFE:2:6E7tjAplePV)
YandexTrojan.GenAsa!KrRH80wLxfI
IkarusRootkit.Win32.TDSS
MaxSecureTrojan.Malware.1908537.susgen
FortinetW32/PackTDss.V!tr.rkit
AVGWin32:Alureon-IU [Trj]
Cybereasonmalicious.188a8e
DeepInstinctMALICIOUS

How to remove Heur.Krypt.69?

Heur.Krypt.69 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment