About “Win32/Kryptik.HCBX” infection

The Win32/Kryptik.HCBX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.HCBX virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.

How to determine Win32/Kryptik.HCBX?


File Info:
crc32: 55583044
md5: ddc4699fe0676b08697433aa266efe5b
name: regasm.exe
sha1: 1cb71e60134a095846cfc5643815ffa01e0208f0
sha256: c0a5efa648ce6907009f70a780f8a50ac6c937d02beb6d4c76a689cadae8bc0e
sha512: c8f53ec9d0217b52c769dde1283bb7addfa13eafe2596f44114858baeea1c91c0601e296b315a85d80c5599324c82acdb6105017ff9ddce7e30aa21cb411af99
ssdeep: 24576:BUPhQWzgJKd1ritL4L2x/yPRKv+MEiRn09Hxi:qPhxWt8L2xIRBMEiR+Ri
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9. 1999 - 2014 Nexus 
InternalName: Prblemsj
CompanyName: Nexus 
ProductName: Prblemsj
ProductVersion: 9.7.9.369
FileDescription: Chargeback Scrllbar Velocity Fires Eg Cmbines
OriginalFilename: Prblemsj
Translation: 0x0409 0x04b0

Win32/Kryptik.HCBX also known as:

Bkav	W32.AIDetectVM.malware2
MicroWorld-eScan	Trojan.GenericKD.42863977
FireEye	Generic.mg.ddc4699fe0676b08
Qihoo-360	Win32/Backdoor.77e
McAfee	Artemis!DDC4699FE067
AegisLab	Trojan.Multi.Generic.4!c
Cybereason	malicious.0134a0
BitDefenderTheta	Gen:NN.ZexaF.34100.!q0@aCR@THji
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Backdoor.Win32.Androm.twvi
McAfee-GW-Edition	BehavesLike.Win32.Generic.fc
Trapmine	malicious.high.ml.score
Ikarus	Trojan-Spy.Remcos
Endgame	malicious (high confidence)
ZoneAlarm	Backdoor.Win32.Androm.twvi
Microsoft	Trojan:Win32/Wacatac.C!ml
Acronis	suspicious
Malwarebytes	Spyware.LokiBot
ESET-NOD32	a variant of Win32/Kryptik.HCBX
eGambit	Unsafe.AI_Score_99%
Fortinet	PossibleThreat.MU
AVG	Win32:Trojan-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_80% (W)

How to remove Win32/Kryptik.HCBX?

Win32/Kryptik.HCBX removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X