Malware

About “Win32/Kryptik.HFTI” infection

Malware Removal

The Win32/Kryptik.HFTI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HFTI virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Mimics the system’s user agent string for its own requests
  • Expresses interest in specific running processes
  • Spoofs its process name and/or associated pathname to appear as a legitimate process
  • Anomalous binary characteristics

How to determine Win32/Kryptik.HFTI?


File Info:

crc32: 5331BBC5
md5: 271f5fc162499f71bc40ea123c05eb42
name: 271F5FC162499F71BC40EA123C05EB42.mlw
sha1: fd65546bcdc74bc3bcb650b882f9aa1bebc80be2
sha256: 91a7ccfb75bfe553f7ba140d678aefd4b2f1e41f636202126e09437de3163cbb
sha512: 745661b5ceec0f050190db097795dad8b3eb0e7c0ecf1af9b434d5d9dd763a5b2f2ca1805d8e2b9cb505beb2ea98a4447a841495634da5e8045c7083ec6d256c
ssdeep: 6144:24urNWtyuO67NJliBzuUKF5ymMsoXNagGLf:ztb7Nqz3KFCdjGT
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Kryptik.HFTI also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.EmotetU.Gen.uqW@bmxPoKbi
FireEyeGeneric.mg.271f5fc162499f71
McAfeeEmotet-FRW!271F5FC16249
CylanceUnsafe
BitDefenderTrojan.EmotetU.Gen.uqW@bmxPoKbi
Cybereasonmalicious.162499
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Evo-gen [Susp]
KasperskyHEUR:Trojan-Banker.Win32.Emotet.vho
RisingTrojan.Emotet!1.CB4A (CLASSIC)
Ad-AwareTrojan.EmotetU.Gen.uqW@bmxPoKbi
EmsisoftTrojan.Emotet (A)
DrWebTrojan.Emotet.1005
InvinceaTroj/Emotet-CLT
McAfee-GW-EditionBehavesLike.Win32.Emotet.fh
SophosTroj/Emotet-CLT
IkarusTrojan-Banker.Emotet
JiangminTrojan.Banker.Emotet.ofo
MAXmalware (ai score=86)
MicrosoftTrojan:Win32/Emotet.ARJ!MTB
ArcabitTrojan.EmotetU.Gen.E156DF
ZoneAlarmHEUR:Trojan-Banker.Win32.Emotet.vho
GDataWin32.Trojan-Spy.Emotet.KZA356
AhnLab-V3Trojan/Win32.Emotet.R349336
ALYacTrojan.EmotetU.Gen.uqW@bmxPoKbi
MalwarebytesTrojan.MalPack.TRE
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Kryptik.HFTI
SentinelOneStatic AI – Suspicious PE
FortinetW32/Kryptik.EREZ!tr
AVGFileRepMalware
Qihoo-360HEUR/QVM20.1.3967.Malware.Gen

How to remove Win32/Kryptik.HFTI?

Win32/Kryptik.HFTI removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment