What is "Win32/Kryptik.HCOJ"?

The Win32/Kryptik.HCOJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HCOJ virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Kryptik.HCOJ?


File Info:
crc32: A6AE541C
md5: ae0d2cc2db041ef113aa66dd86e6344f
name: djfilez.exe
sha1: 9ad3ce2e83072c32c58f32fce3d1947bcedebb6c
sha256: 5c9c3c6bcb8f2f22bd0fbe9a1aa25229894f9c6d6f9dae153c9c86e2618ab2fb
sha512: bd7120f0fcc41fb63cad599c1aaaaa9f6eb4ecc11ff845e4652f5215f25e44cb348ae731bfb29f2be1edfdf30fcf394b42f1e20707fd4643e0297e663f361d94
ssdeep: 6144:C03teM4+3za+N785i79/2y1v6YWBxxIiMbhdB7ZkwCTAK2Jr5rX2Eyzdck9W/:C09l3zaV5i79eSq6hbdo/o572bRq/
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xc2xa91999-2015 Jonathan Bennett & AutoIt Team
InternalName: Aut2Exe.exe
FileVersion: 3, 3, 14, 2
CompanyName: AutoIt Team
Comments: http://www.autoitscript.com/autoit3/
ProductName: Aut2Exe
ProductVersion: 3, 3, 14, 2
FileDescription: Aut2Exe
OriginalFilename: Aut2Exe.exe
Translation: 0x0809 0x04b0

Win32/Kryptik.HCOJ also known as:

FireEye	Generic.mg.ae0d2cc2db041ef1
McAfee	RDN/Generic.grp
Cylance	Unsafe
Sangfor	Malware
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.e83072
F-Prot	W32/Agent.BRV.gen!Eldorado
APEX	Malicious
GData	Win32.Trojan-Stealer.AgentTesla.6KJTYI
Kaspersky	UDS:DangerousObject.Multi.Generic
AegisLab	Trojan.Multi.Generic.4!c
Rising	Malware.Heuristic!ET#92% (RDMK:cmRtazqrmICoAjoNAxHyDPFjcr5r)
Endgame	malicious (high confidence)
DrWeb	Trojan.PWS.Siggen2.46497
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Xiquitir.hh
Trapmine	malicious.high.ml.score
Cyren	W32/Agent.BRV.gen!Eldorado
Webroot	W32.Trojan.Gen
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	Trojan:Win32/Wacatac.D!ml
Acronis	suspicious
Malwarebytes	Spyware.AgentTesla
ESET-NOD32	a variant of Win32/Kryptik.HCOJ
Tencent	Win32.Trojan.Inject.Auto
SentinelOne	DFI – Malicious PE
Fortinet	W32/Kryptik.HCOJ!tr
AVG	FileRepMalware
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32/Kryptik.HCOJ?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Win32/Kryptik.HCOJ”?