Malware

Win32/Kryptik.EHNF removal guide

Malware Removal

The Win32/Kryptik.EHNF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.EHNF virus can do?

  • Unconventionial language used in binary resources: Azeri (Cyrillic)
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Win32/Kryptik.EHNF?


File Info:

crc32: 83F10A34
md5: 66a35b0ee3efed372ab5384d8005c649
name: 66A35B0EE3EFED372AB5384D8005C649.mlw
sha1: 549637c53771be976bfb7ac571384590392117b6
sha256: 1b7966ab5858dfde4c1a93477801eaee730664b151228b5f10a3648f84132557
sha512: 35ea2400b67d3506a3ecee088070c441b990856bf1e6a67dca1af9f4cfc5c0e776ceb96abe24f45b985a4107b96c8c4d385a670e4b589217db68b8321e54fbe2
ssdeep: 3072:pNIrBTxWILXsO15Ag0Fur87PJIJH0nkvbvSkHmva9:pap7jF15AOgLK0kvb6kHmva9
type: MS-DOS executable, MZ for MS-DOS

Version Info:

0: [No Data]

Win32/Kryptik.EHNF also known as:

BkavW32.FamVT.RazyNHmC.Trojan
K7AntiVirusTrojan ( 004d89d41 )
Elasticmalicious (high confidence)
CAT-QuickHealRansom.Crowti.WR7
CylanceUnsafe
ZillyaTrojan.Blocker.Win32.32558
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 004d89d41 )
Cybereasonmalicious.ee3efe
BaiduWin32.Trojan.Kryptik.th
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.EHNF
APEXMalicious
AvastWin32:TeslaCrypt-B [Trj]
ClamAVWin.Ransomware.TeslaCrypt-9816736-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Lethic.Gen.13
NANO-AntivirusTrojan.Win32.DownLoad3.dzbjci
ViRobotTrojan.Win32.Kryptik.Gen.A
MicroWorld-eScanTrojan.Lethic.Gen.13
TencentMalware.Win32.Gencirc.114c53c3
Ad-AwareTrojan.Lethic.Gen.13
SophosML/PE-A + Mal/Ransom-DU
ComodoTrojWare.Win32.GdSda.EIA@64jwjb
BitDefenderThetaAI:Packer.A5C30B3F1D
TrendMicroTROJ_HPEPING.SM
FireEyeGeneric.mg.66a35b0ee3efed37
EmsisoftTrojan.Lethic.Gen.13 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Bublik.tx
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.16010CF
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataTrojan.Lethic.Gen.13
AhnLab-V3Trojan/Win32.Xema.C1311764
McAfeeGenericATG-FCFU!66A35B0EE3EF
MAXmalware (ai score=81)
MalwarebytesTrojan.Crypt
TrendMicro-HouseCallTROJ_HPEPING.SM
RisingTrojan.Kryptik!1.A31F (CLASSIC)
YandexTrojan.GenAsa!FL/G0nSeq3o
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.EHNF!tr
AVGWin32:TeslaCrypt-B [Trj]

How to remove Win32/Kryptik.EHNF?

Win32/Kryptik.EHNF removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment