Win32/Kryptik.HDZF removal

The Win32/Kryptik.HDZF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.HDZF virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Win32/Kryptik.HDZF?


File Info:
crc32: 89B51F01
md5: 4647e0b5746d185f35df093ba5aeab87
name: 4647E0B5746D185F35DF093BA5AEAB87.mlw
sha1: 416b1aa088bdf85d86721d16e0bd1d2351dc5e88
sha256: 7bb156f69e04faedc0db155ff322a828b2dc637481ce9972218043365afcc189
sha512: dbfbac4c4d2c0ddbc84a436983d43a75a91f4f1bf3df92a9606ce55d0cd150035bccc17de5a8cdc54d667aa308019760fcdb870751f9e8ef33d156248a61d51a
ssdeep: 6144:90JBK4heAGFyCGGruUj6W9gemF8H6Xb/ERwT+:iJ9elFyC5GW9bmm
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/Kryptik.HDZF also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.EmotetU.Gen.suW@h8ZmD@dO
FireEye	Generic.mg.4647e0b5746d185f
ALYac	Trojan.EmotetU.Gen.suW@h8ZmD@dO
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic.pak!cobra
Sangfor	Malware
BitDefender	Trojan.EmotetU.Gen.suW@h8ZmD@dO
Cybereason	malicious.088bdf
TrendMicro	TrojanSpy.Win32.EMOTET.SMT.hp
BitDefenderTheta	Gen:NN.ZexaF.34634.suW@a8ZmD@dO
Cyren	W32/Kryptik.BMB.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:BankerX-gen [Trj]
ClamAV	Win.Packed.Generickdz-9789153-0
Rising	Trojan.Kryptik!1.C927 (CLASSIC)
Ad-Aware	Trojan.EmotetU.Gen.suW@h8ZmD@dO
Sophos	Mal/Encpk-APE
Comodo	TrojWare.Win32.TrickBot.HP@8r2xd4
DrWeb	Trojan.Trick.46562
Invincea	Mal/Encpk-APE
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
Emsisoft	Trojan.EmotetU.Gen.suW@h8ZmD@dO (B)
Ikarus	Trojan.Win32.Krypt
Microsoft	Trojan:Win32/Emotet.DDZ!MTB
Arcabit	Trojan.EmotetU.Gen.ED314B
GData	Trojan.EmotetU.Gen.suW@h8ZmD@dO
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Kryptik.R334184
McAfee	GenericRXKI-HN!4647E0B5746D
MAX	malware (ai score=83)
VBA32	BScope.Backdoor.Emotet
Malwarebytes	Trojan.TrickBot
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Kryptik.HDZF
TrendMicro-HouseCall	TrojanSpy.Win32.EMOTET.SMT.hp
Tencent	Malware.Win32.Gencirc.11b10043
Fortinet	W32/Kryptik.HCYC!tr
AVG	Win32:BankerX-gen [Trj]
CrowdStrike	win/malicious_confidence_80% (D)
Qihoo-360	HEUR/QVM20.1.3FBB.Malware.Gen

How to remove Win32/Kryptik.HDZF?

Win32/Kryptik.HDZF removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X