Malware

Win32/Kryptik.HFYL information

Malware Removal

The Win32/Kryptik.HFYL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HFYL virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Mimics the system’s user agent string for its own requests
  • Expresses interest in specific running processes
  • Unconventionial language used in binary resources: Romanian
  • Anomalous binary characteristics

How to determine Win32/Kryptik.HFYL?


File Info:

crc32: 83D4C47C
md5: 732299ca1c58b4407e8b2b22ffa13fdb
name: upload_file
sha1: f11b13059ffb1ca3c4f1afe158330e599d7c3d87
sha256: 341ab1e8d9c6288676636d80f000c19f89ff1caab476f33a2065b77f22185dc4
sha512: 1f2091022295f73217461fa3eba9969f4795b37b2f9b9ba60067787e551d894cccfa947955d002c5423e13b5e21aa83e498a9afdbe688dc48c9ad634e8126742
ssdeep: 6144:nz26ALg+dVQM0IIP33gSeKzO4eHp0G5EbnzQCokkUCPOjI+lTcM:r80Io33QKzO4emVbnzQCokkUCPOUDM
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Force base from his rally on Thursday night.
InternalName: Trump again said mail-in ballots are a.exe
FileVersion: 660.7.9
CompanyName: here have been many weeks when the Trump train
ProductName: As well as the North Carolina furor
ProductVersion: 5.99.34.1
FileDescription: The outrages, conspiracy theories and drama have come so fast>
OriginalFilename: Trump will ignite a new uproar soon enough.exe
Translation: 0x0409 0x04e4

Win32/Kryptik.HFYL also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.69915
FireEyeGeneric.mg.732299ca1c58b440
McAfeeEmotet-FSC!732299CA1C58
CylanceUnsafe
ZillyaTrojan.Emotet.Win32.28376
SangforMalware
K7AntiVirusTrojan ( 0056dc3b1 )
BitDefenderTrojan.GenericKDZ.69915
K7GWTrojan ( 0056dc3b1 )
TrendMicroTROJ_GEN.R002C0DI620
CyrenW32/Kryptik.BWK.gen!Eldorado
SymantecPacked.Generic.554
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Packed.Emotet-9753169-0
KasperskyTrojan-Banker.Win32.Emotet.gdmm
AlibabaTrojan:Win32/Emotet.0569f5e5
NANO-AntivirusTrojan.Win32.Emotet.hubynz
AegisLabTrojan.Win32.Emotet.L!c
Ad-AwareTrojan.GenericKDZ.69915
SophosTroj/Emotet-CNA
F-SecureTrojan.TR/Crypt.Agent.ijqkp
DrWebTrojan.DownLoader34.32516
VIPRETrojan.Win32.Generic!BT
InvinceaMal/Generic-R + Troj/Emotet-CNA
McAfee-GW-EditionBehavesLike.Win32.Emotet.gh
EmsisoftTrojan.GenericKDZ.69915 (B)
IkarusTrojan-Banker.Emotet
JiangminTrojan.Banker.Emotet.ohv
MaxSecureTrojan.Malware.106378976.susgen
AviraTR/Crypt.Agent.ijqkp
MAXmalware (ai score=89)
Antiy-AVLTrojan/Win32.Kryptik
MicrosoftTrojan:Win32/Emotet.ARJ!MTB
ArcabitTrojan.Generic.D1111B
ZoneAlarmTrojan-Banker.Win32.Emotet.gdmm
GDataTrojan.GenericKDZ.69915
CynetMalicious (score: 85)
AhnLab-V3Trojan/Win32.Emotet.R350747
BitDefenderThetaGen:NN.ZexaF.34282.Cq0@aW0KSAdO
ALYacTrojan.Agent.Emotet
TACHYONBanker/W32.Emotet.458752.L
VBA32TrojanBanker.Emotet
MalwarebytesTrojan.MalPack.TRE
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Kryptik.HFYL
TrendMicro-HouseCallTROJ_GEN.R002C0DI620
RisingTrojan.Emotet!1.CBDE (CLASSIC)
YandexTrojan.Kryptik!PvEJvKU7vrw
FortinetW32/Malicious_Behavior.VEX
AVGWin32:BankerX-gen [Trj]
AvastWin32:BankerX-gen [Trj]
Qihoo-360Win32/Trojan.653

How to remove Win32/Kryptik.HFYL?

Win32/Kryptik.HFYL removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment