Malware

About “Win32/Kryptik.HGPG” infection

Malware Removal

The Win32/Kryptik.HGPG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HGPG virus can do?

  • Presents an Authenticode digital signature
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Kryptik.HGPG?


File Info:

crc32: 3E7B2804
md5: 60a9b1cd9ea9274cca3fb9aa0ab76901
name: upload_file
sha1: d45edbe2e5547b6b610729993f2ba399702a93ee
sha256: 1aa9a36f8aef3a7e0d24920b0c5ba67e2b47b6d83a5db1df4570755776bbf08a
sha512: a833d1933bf068d629fec7069beea487b51519e538767c23917dfb8dd2a60dedd2028a376dcd3888092f407f0e120b6b7bb6e43627c98fd077a82bce829ef4b2
ssdeep: 6144:Cs3ToPMXLGnQE9NphY64U/jMIuxF8RrnFnknZn3nRmn/nlnenvnxnGn5nPYnhnpL:N3EPMbGnLphKeMIuxKRcr
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2016
InternalName: 360realpro.exe
FileVersion: 8,8,0,1000
OriginalFilename: 360realpro.exe
ProductVersion: 8,8,0,1000
Translation: 0x0409 0x04b0

Win32/Kryptik.HGPG also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.34702680
CAT-QuickHealTrojan.IGENERIC
ALYacTrojan.GenericKD.34702680
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Zload.a!c
SangforMalware
K7AntiVirusSpyware ( 0040f0131 )
BitDefenderTrojan.GenericKD.34702680
K7GWSpyware ( 0040f0131 )
CrowdStrikewin/malicious_confidence_100% (D)
TrendMicroTROJ_GEN.R057C0DJ920
CyrenW32/Trojan.QQTF-6694
SymantecPacked.Generic.459
AvastWin32:DangerousSig [Trj]
ClamAVWin.Dropper.Zload-9775446-0
KasperskyTrojan-Downloader.Win32.Zload.tu
AlibabaTrojanDownloader:Win32/Zload.7a94ecf7
NANO-AntivirusTrojan.Win32.Zload.hzcfog
ViRobotTrojan.Win32.Z.Zload.439640
TencentWin32.Trojan.Falsesign.Wnmn
Ad-AwareTrojan.GenericKD.34702680
EmsisoftTrojan-Downloader.Agent (A)
F-SecureTrojan.TR/Crypt.Agent.rupxg
InvinceaMal/Generic-R + Mal/EncPk-APV
McAfee-GW-EditionGenericRXMF-AJ!60A9B1CD9EA9
FireEyeGeneric.mg.60a9b1cd9ea9274c
SophosMal/EncPk-APV
IkarusTrojan.Win32.Krypt
JiangminTrojanDownloader.Zload.du
AviraTR/Crypt.Agent.rupxg
Antiy-AVLGrayWare/Win32.Kryptik.ehls
MicrosoftTrojan:Win32/ZLoader.AR!Cert
ArcabitTrojan.Generic.D2118558
ZoneAlarmTrojan-Downloader.Win32.Zload.tu
GDataTrojan.GenericKD.34702680
CynetMalicious (score: 100)
Acronissuspicious
McAfeeGenericRXMF-AJ!60A9B1CD9EA9
MAXmalware (ai score=81)
VBA32BScope.Trojan.Diple
MalwarebytesTrojan.Downloader
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.HGPG
TrendMicro-HouseCallTROJ_GEN.R057C0DJ920
RisingDownloader.Zload!8.118E0 (TFE:5:RTM0j43KIsH)
eGambitUnsafe.AI_Score_100%
FortinetW32/Zload.ETRL!tr.dldr
BitDefenderThetaGen:NN.ZedlaF.34566.Ay9@aezWD8gi
AVGWin32:DangerousSig [Trj]
Qihoo-360Win32/Trojan.Downloader.1d0

How to remove Win32/Kryptik.HGPG?

Win32/Kryptik.HGPG removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment