Categories: Malware

How to remove “Win32/Kryptik.FHSE”?

The Win32/Kryptik.FHSE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.FHSE virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)

Related domains:

z.whorecord.xyz

a.tomx.xyz

www.wlsgg.cn

How to determine Win32/Kryptik.FHSE?


File Info:
crc32: 401192AFmd5: 17927509d2863ccb6eabc622cb1bf07dname: 1.exesha1: d0beff64d62a85936108cd2a0ef20260b149013bsha256: 5e8a78f27bcee6ec3583bdc83191a6ae31b909a4d044b08e2310e38b2c78a8c0sha512: cfcdbc9b6bc4f8ac466266253d1192acd4e8b6a8b1d68d40480e04f79aefcd6655c7307a65d22f89f0941a2f5070a922a3a856855ecf672dacaf6e4f5d21b05bssdeep: 6144:b5sO+srkQQiE9JSeAwa+f+pHWu0MTeF/ud:17lE9JFb2pHWidtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2011 x6df1x5733x5e02x8fc5x96f7x7f51x7edcx6280x672fx6709x9650x516cx53f8InternalName: ExeMiniDownload.exeFileVersion: 1, 5, 3, 288CompanyName: x6df1x5733x5e02x8fc5x96f7x7f51x7edcx6280x672fx6709x9650x516cx53f8PrivateBuild: LegalTrademarks: Comments: ProductName: x8fc5x96f7x7cbex7b80x7248SpecialBuild: ProductVersion: 1, 5, 3, 288FileDescription: x8fc5x96f7x7cbex7b80x7248OriginalFilename: ExeMiniDownload.exeTranslation: 0x0804 0x04b0

Win32/Kryptik.FHSE also known as:

Bkav	W32.AIDetectVM.malware
MicroWorld-eScan	Trojan.GenericKD.32908175
FireEye	Generic.mg.17927509d2863ccb
CAT-QuickHeal	Trojan.Siscos
Qihoo-360	Win32/Backdoor.Yuankong.F
McAfee	GenericRXHS-SY!17927509D286
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 004fbf8e1 )
BitDefender	Trojan.GenericKD.32908175
K7GW	Trojan ( 004fbf8e1 )
Cybereason	malicious.4d62a8
Invincea	heuristic
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:BackdoorX-gen [Trj]
ClamAV	Win.Trojan.Generic-6305873-0
GData	Trojan.GenericKD.32908175
Kaspersky	Trojan.Win32.Siscos.aagw
Alibaba	Backdoor:Win32/Siscos.59ac9f09
NANO-Antivirus	Trojan.Win32.Kryptik.gsccfk
AegisLab	Trojan.Win32.Siscos.4!c
Tencent	Win32.Trojan.Killav.Dzag
Endgame	malicious (high confidence)
Sophos	Mal/Generic-S
Comodo	Malware@#1v0ktdlihim5n
F-Secure	Heuristic.HEUR/AGEN.1019044
DrWeb	DLOADER.Trojan
TrendMicro	BKDR_HPZEGOST.SMF1
McAfee-GW-Edition	GenericRXHS-SY!17927509D286
Emsisoft	Trojan.GenericKD.32908175 (B)
Ikarus	Trojan.Win32.Farfli
Cyren	W32/Trojan.ZGKV-0807
Jiangmin	Trojan.Siscos.pb
Webroot	W32.Trojan.GenKD
Avira	HEUR/AGEN.1019044
MAX	malware (ai score=80)
Arcabit	Trojan.Generic.D1F6238F
ZoneAlarm	Trojan.Win32.Siscos.aagw
Microsoft	Backdoor:Win32/Zegost.CQ!bit
AhnLab-V3	Trojan/Win32.Gh0st.R30499
VBA32	BScope.Trojan.Downloader
ALYac	Trojan.GenericKD.32908175
Ad-Aware	Trojan.GenericKD.32908175
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Kryptik.FHSE
TrendMicro-HouseCall	BKDR_HPZEGOST.SMF1
Rising	Backdoor.Farfli!1.64B3 (CLOUD)
Yandex	Trojan.Siscos!VXTJKRzEMH4
SentinelOne	DFI – Suspicious PE
eGambit	PE.Heur.InvalidSig
Fortinet	W32/Kryptik.FHSE!tr
BitDefenderTheta	Gen:NN.ZexaF.34100.sm1@aadxiceb
AVG	Win32:BackdoorX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.1728101.susgen