Malware

Win32/Kryptik.HCDS removal guide

Malware Removal

The Win32/Kryptik.HCDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HCDS virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Kryptik.HCDS?


File Info:

crc32: 72ABC268
md5: 71209c7fc407220e9a698dac860554a7
name: tmpbdyzotdg
sha1: 1c1c701b99d23d9b4b408af87ec15350f68731ce
sha256: cd06cd467ba6c7f253a850450691e8b996f955b69f6fa9ff231f52bfe95fbd18
sha512: fc4a929fbbe087dce1c3d99969d41a7a0df096bb602bcfe918b2c5f9340a057416df09ad3748437932e29f267e10829dde059245389aee9102a59bc3c634b710
ssdeep: 12288:HCZItKmxDMcdj6OLY1vl0Gbw1q8KDZ7bAqW:rtK8oEjcsoFZvAqW
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Kryptik.HCDS also known as:

MicroWorld-eScanTrojan.GenericKD.42867166
FireEyeGeneric.mg.71209c7fc407220e
McAfeeEmotet-FPC!71209C7FC407
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Multi.Generic.4!c
SangforMalware
K7AntiVirusTrojan ( 005632711 )
BitDefenderTrojan.GenericKD.42867166
K7GWTrojan ( 005632711 )
TrendMicroTROJ_GEN.R002C0DCN20
F-ProtW32/Kryptik.BIB.gen!Eldorado
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
GDataTrojan.GenericKD.42867166
KasperskyTrojan.Win32.Zenpak.xpb
AlibabaBackdoor:Win32/Emotet.02d768ad
ViRobotTrojan.Win32.S.Trickbot.716800
TencentWin32.Trojan.Zenpak.Adtw
Endgamemalicious (high confidence)
SophosTroj/Trickbo-WC
ComodoMalware@#2jk21l7s6bb63
DrWebTrojan.Inject3.36659
ZillyaTrojan.Kryptik.Win32.1965790
Invinceaheuristic
McAfee-GW-EditionEmotet-FPC!71209C7FC407
MaxSecureTrojan.Malware.1728101.susgen
EmsisoftTrojan.Agent (A)
IkarusTrojan.Win32.Crypt
CyrenW32/Trojan.JOFM-7685
JiangminTrojan.Zenpak.bpj
AviraTR/AD.TrickBot.hgyxd
MAXmalware (ai score=100)
MicrosoftTrojan:Win32/Emotet.DDH!MTB
ArcabitTrojan.Generic.D28E19DE
SUPERAntiSpywareTrojan.Agent/Gen-Emotet
ZoneAlarmTrojan.Win32.Zenpak.xpb
AhnLab-V3Trojan/Win32.Trickbot.C4028484
Acronissuspicious
ALYacTrojan.Agent.Wacatac
VBA32Trojan.Zenpak
MalwarebytesTrojan.TrickBot
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Kryptik.HCDS
TrendMicro-HouseCallTROJ_GEN.R002C0DCN20
RisingTrojan.Kryptik!8.8 (CLOUD)
FortinetW32/Generik.LGINPPZ!tr
Ad-AwareTrojan.GenericKD.42867166
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Trojan.Generic

How to remove Win32/Kryptik.HCDS?

Win32/Kryptik.HCDS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment