Malware

Win32/Kryptik.AHHK removal tips

Malware Removal

The Win32/Kryptik.AHHK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.AHHK virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Win32/Kryptik.AHHK?


File Info:

crc32: 70468BC5
md5: 97847c74a525d82c7830ea21dd7e9dcc
name: 97847C74A525D82C7830EA21DD7E9DCC.mlw
sha1: d1adbb10c66f7c605e9bc09cea69110cf5ca8f7d
sha256: 2121ef02f0097c2e17d5c08f3f6870141bb3e87751f008f1a22ae596bd7b03c9
sha512: 7a42028d429b651e44227b52fb1f9938e28829923354517f6bde8bc8d8b17f38051ea5d795b172e08698d29915eee63cbef3836e304045ac986b1c9d4c5d98bb
ssdeep: 3072:2IDBd271vrWO04IQi89hfO2e/RykhiYT2pzMipAHMSU+TDI1A:NDUjWO04li4O2Q4mi8pH5U+TDI1A
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Kryptik.AHHK also known as:

K7AntiVirusTrojan ( 0040f0751 )
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Panda.2000
CynetMalicious (score: 100)
CylanceUnsafe
ZillyaTrojan.Zbot.Win32.89921
CrowdStrikewin/malicious_confidence_80% (D)
K7GWTrojan ( 0040f0751 )
Cybereasonmalicious.0c66f7
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.AHHK
APEXMalicious
AvastWin32:Kryptik-JAH [Trj]
ClamAVWin.Dropper.Zeus-9396557-0
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.Panda.ewkkly
ViRobotTrojan.Win32.A.Zbot.159744.GQ
TencentMalware.Win32.Gencirc.1149243a
SophosML/PE-A + Mal/Kuluoz-A
F-SecureTrojan.TR/Crypt.ZPACK.Gen7
BitDefenderThetaGen:NN.ZexaF.34294.jqW@a4bz15hi
VIPRETrojan.Win32.Weelsof.c (v)
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
FireEyeGeneric.mg.97847c74a525d82c
SentinelOneStatic AI – Malicious PE
JiangminTrojanSpy.Zbot.btpw
WebrootW32.Infostealer.Zeus
AviraTR/Crypt.ZPACK.Gen7
eGambitUnsafe.AI_Score_98%
Antiy-AVLTrojan/Generic.ASMalwS.212B3B
MicrosoftPWS:Win32/Zbot!CI
AhnLab-V3Downloader/Win32.Agent.R29019
Acronissuspicious
McAfeePWS-Zbot.gen.ail
MAXmalware (ai score=99)
VBA32BScope.Trojan-Spy.Zbot
MalwarebytesGeneric.Malware/Suspicious
PandaGeneric Malware
RisingTrojan.Generic@ML.100 (RDML:TCFZoFrMACSCeZg25b+OGg)
YandexTrojan.GenAsa!KvtkETXhNis
IkarusTrojan.Win32.Weelsof
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.WEF!tr
AVGWin32:Kryptik-JAH [Trj]
Paloaltogeneric.ml

How to remove Win32/Kryptik.AHHK?

Win32/Kryptik.AHHK removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment