How to remove "Win32/Kryptik.FHSE"?

The Win32/Kryptik.FHSE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.FHSE virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)

Related domains:

z.whorecord.xyz

a.tomx.xyz

www.wlsgg.cn

How to determine Win32/Kryptik.FHSE?


File Info:
crc32: 401192AF
md5: 17927509d2863ccb6eabc622cb1bf07d
name: 1.exe
sha1: d0beff64d62a85936108cd2a0ef20260b149013b
sha256: 5e8a78f27bcee6ec3583bdc83191a6ae31b909a4d044b08e2310e38b2c78a8c0
sha512: cfcdbc9b6bc4f8ac466266253d1192acd4e8b6a8b1d68d40480e04f79aefcd6655c7307a65d22f89f0941a2f5070a922a3a856855ecf672dacaf6e4f5d21b05b
ssdeep: 6144:b5sO+srkQQiE9JSeAwa+f+pHWu0MTeF/ud:17lE9JFb2pHWid
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2011 x6df1x5733x5e02x8fc5x96f7x7f51x7edcx6280x672fx6709x9650x516cx53f8
InternalName: ExeMiniDownload.exe
FileVersion: 1, 5, 3, 288
CompanyName: x6df1x5733x5e02x8fc5x96f7x7f51x7edcx6280x672fx6709x9650x516cx53f8
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: x8fc5x96f7x7cbex7b80x7248
SpecialBuild: 
ProductVersion: 1, 5, 3, 288
FileDescription: x8fc5x96f7x7cbex7b80x7248
OriginalFilename: ExeMiniDownload.exe
Translation: 0x0804 0x04b0

Win32/Kryptik.FHSE also known as:

Bkav	W32.AIDetectVM.malware
MicroWorld-eScan	Trojan.GenericKD.32908175
FireEye	Generic.mg.17927509d2863ccb
CAT-QuickHeal	Trojan.Siscos
Qihoo-360	Win32/Backdoor.Yuankong.F
McAfee	GenericRXHS-SY!17927509D286
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 004fbf8e1 )
BitDefender	Trojan.GenericKD.32908175
K7GW	Trojan ( 004fbf8e1 )
Cybereason	malicious.4d62a8
Invincea	heuristic
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:BackdoorX-gen [Trj]
ClamAV	Win.Trojan.Generic-6305873-0
GData	Trojan.GenericKD.32908175
Kaspersky	Trojan.Win32.Siscos.aagw
Alibaba	Backdoor:Win32/Siscos.59ac9f09
NANO-Antivirus	Trojan.Win32.Kryptik.gsccfk
AegisLab	Trojan.Win32.Siscos.4!c
Tencent	Win32.Trojan.Killav.Dzag
Endgame	malicious (high confidence)
Sophos	Mal/Generic-S
Comodo	Malware@#1v0ktdlihim5n
F-Secure	Heuristic.HEUR/AGEN.1019044
DrWeb	DLOADER.Trojan
TrendMicro	BKDR_HPZEGOST.SMF1
McAfee-GW-Edition	GenericRXHS-SY!17927509D286
Emsisoft	Trojan.GenericKD.32908175 (B)
Ikarus	Trojan.Win32.Farfli
Cyren	W32/Trojan.ZGKV-0807
Jiangmin	Trojan.Siscos.pb
Webroot	W32.Trojan.GenKD
Avira	HEUR/AGEN.1019044
MAX	malware (ai score=80)
Arcabit	Trojan.Generic.D1F6238F
ZoneAlarm	Trojan.Win32.Siscos.aagw
Microsoft	Backdoor:Win32/Zegost.CQ!bit
AhnLab-V3	Trojan/Win32.Gh0st.R30499
VBA32	BScope.Trojan.Downloader
ALYac	Trojan.GenericKD.32908175
Ad-Aware	Trojan.GenericKD.32908175
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Kryptik.FHSE
TrendMicro-HouseCall	BKDR_HPZEGOST.SMF1
Rising	Backdoor.Farfli!1.64B3 (CLOUD)
Yandex	Trojan.Siscos!VXTJKRzEMH4
SentinelOne	DFI – Suspicious PE
eGambit	PE.Heur.InvalidSig
Fortinet	W32/Kryptik.FHSE!tr
BitDefenderTheta	Gen:NN.ZexaF.34100.sm1@aadxiceb
AVG	Win32:BackdoorX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.1728101.susgen

How to remove Win32/Kryptik.FHSE?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Win32/Kryptik.FHSE”?