Malware

Win32/Kryptik.HGPK removal guide

Malware Removal

The Win32/Kryptik.HGPK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HGPK virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Win32/Kryptik.HGPK?


File Info:

crc32: 5C8B03B8
md5: 02ac15cd01137d4ead20c840f004d3ef
name: upload_file
sha1: 96ea3fe6d96c3ecd6a66814c221e51f64d9c55a1
sha256: 782ea4a6943ceafa3d1133c5cbba0bbb6cdd88953ffae7ab89ac8a7f79101e0a
sha512: a37096188df742ab1f8b7557ec42764244ab8b9ba2eb0d510acb06ea574fe9ff57f9070697f0a75df1d92dda337b38a061751eb3b1df9825aa8df29be4a6fcb6
ssdeep: 6144:AUoPMXLGnQE9NphY64U/jMIuxF8RrnFnknZn3nRmn/nlnenvnxnGn5nPYnhnpan/:MPMbGnLphKeMIuxKR5
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2016
InternalName: 360realpro.exe
FileVersion: 8,8,0,1000
OriginalFilename: 360realpro.exe
ProductVersion: 8,8,0,1000
Translation: 0x0409 0x04b0

Win32/Kryptik.HGPK also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.34705669
FireEyeGeneric.mg.02ac15cd01137d4e
McAfeeGenericRXMF-AJ!02AC15CD0113
CylanceUnsafe
AegisLabTrojan.Win32.Zload.a!c
SangforMalware
BitDefenderTrojan.GenericKD.34705669
K7GWSpyware ( 0040f0131 )
K7AntiVirusSpyware ( 0040f0131 )
InvinceaMal/Generic-R + Mal/EncPk-APV
BitDefenderThetaGen:NN.ZedlaF.34298.Ay9@aaAv2Aki
SymantecPacked.Generic.459
TrendMicro-HouseCallTROJ_GEN.R057C0DJ920
AvastWin32:DangerousSig [Trj]
ClamAVWin.Downloader.Zload-9775500-0
KasperskyTrojan-Downloader.Win32.Zload.ux
AlibabaTrojanDownloader:Win32/Zload.5febaa27
Ad-AwareTrojan.GenericKD.34705669
SophosMal/EncPk-APV
ComodoMalware@#f08ipl2u4joo
F-SecureTrojan.TR/Kryptik.qousk
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R057C0DJ920
McAfee-GW-EditionArtemis!Trojan
EmsisoftTrojan-Downloader.Agent (A)
IkarusTrojan.Win32.Krypt
eGambitUnsafe.AI_Score_100%
AviraTR/Kryptik.qousk
MAXmalware (ai score=83)
Antiy-AVLGrayWare/Win32.Kryptik.ehls
MicrosoftTrojan:Win32/ZLoader.AR!Cert
ArcabitTrojan.Generic.D2119105
ZoneAlarmTrojan-Downloader.Win32.Zload.ux
GDataTrojan.GenericKD.34705669
CynetMalicious (score: 100)
Acronissuspicious
VBA32BScope.Trojan.Diple
MalwarebytesTrojan.Downloader
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.HGPK
RisingTrojan.Generic@ML.93 (RDML:V9nDNM00z0KZ3diTIxdRnw)
FortinetW32/Dridex.DD!tr
AVGWin32:DangerousSig [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Downloader.c78

How to remove Win32/Kryptik.HGPK?

Win32/Kryptik.HGPK removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment