Malware

Win32/Kryptik.HFLS information

Malware Removal

The Win32/Kryptik.HFLS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HFLS virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Mimics the system’s user agent string for its own requests
  • Expresses interest in specific running processes
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Spoofs its process name and/or associated pathname to appear as a legitimate process
  • Anomalous binary characteristics

How to determine Win32/Kryptik.HFLS?


File Info:

crc32: 4D348E99
md5: 75ce4a4d7a6cca0f96da02732f3d7070
name: 75CE4A4D7A6CCA0F96DA02732F3D7070.mlw
sha1: db9e00dba63ec37a9bc2681ade41f879613d3bf0
sha256: c59f119a842c93f587229c7eb0bb9ba0d6d7412ade1ec7f8ea9c001a0b7ed67b
sha512: 1db556d1eb457c9f870481599857fcad56515f4fdae46c3b6ec596aec621b694e062a4b8b1988b63d81cf3ac8be1c15af92d8ef1f8619312a3973a63162bee5b
ssdeep: 6144:lRjpvXz4ZKLAjiH76pFc4U0ciTHjGYaEckMG76MJ:HjJ00LAjiHCFc4z4KcAHJ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2005
InternalName: FolderBrowse
FileVersion: 1, 0, 0, 1
CompanyName:
LegalTrademarks:
ProductName: Anwendung FolderBrowse
ProductVersion: 1, 0, 0, 1
FileDescription: MFC-Anwendung FolderBrowse
OriginalFilename: FolderBrowse.EXE
Translation: 0x0407 0x04b0

Win32/Kryptik.HFLS also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.EmotetU.Gen.rq0@bKgFLvyi
FireEyeTrojan.EmotetU.Gen.rq0@bKgFLvyi
McAfeeEmotet-FQS!75CE4A4D7A6C
K7AntiVirusTrojan ( 005661dc1 )
BitDefenderTrojan.EmotetU.Gen.rq0@bKgFLvyi
K7GWTrojan ( 005661dc1 )
CyrenW32/Trickbot.DP.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:CrypterX-gen [Trj]
ClamAVWin.Packed.Emotet-9790742-0
KasperskyHEUR:Backdoor.Win32.Emotet.vho
RisingTrojan.Generic@ML.97 (RDML:oypY4Xb32/IUIp0gOwMdNw)
Ad-AwareTrojan.EmotetU.Gen.rq0@bKgFLvyi
TACHYONBanker/W32.Trickster.293376
SophosTroj/Emotet-CKT
F-SecureHeuristic.HEUR/AGEN.1138902
DrWebTrojan.Emotet.999
InvinceaTroj/Emotet-CKT
McAfee-GW-EditionBehavesLike.Win32.Emotet.dh
EmsisoftTrojan.Emotet (A)
AviraHEUR/AGEN.1138902
MicrosoftTrojan:Win32/Emotet.ARJ!MTB
ArcabitTrojan.EmotetU.Gen.EEC584
ZoneAlarmHEUR:Backdoor.Win32.Emotet.vho
GDataTrojan.EmotetU.Gen.rq0@bKgFLvyi
CynetMalicious (score: 90)
AhnLab-V3Trojan/Win32.Emotet.R347335
MAXmalware (ai score=84)
MalwarebytesTrojan.MalPack.TRE
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Kryptik.HFLS
IkarusTrojan-Banker.Emotet
FortinetW32/Emotet.997!tr
BitDefenderThetaGen:NN.ZexaE.34634.rq0@aKgFLvyi
AVGWin32:CrypterX-gen [Trj]
Qihoo-360HEUR/QVM10.1.3FBB.Malware.Gen

How to remove Win32/Kryptik.HFLS?

Win32/Kryptik.HFLS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment