Categories: Malware

How to remove “Win32/Kryptik.HHMS”?

The Win32/Kryptik.HHMS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HHMS virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (2 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Collects information about installed applications
Anomalous binary characteristics

How to determine Win32/Kryptik.HHMS?


File Info:
crc32: B6192C21md5: 3a9b6f3731229534f9010f0831d3bc30name: 3A9B6F3731229534F9010F0831D3BC30.mlwsha1: 47d086aaab4f6508c3839e3fe165364c20ebbd11sha256: 8cc5a65a8206e82d93604182bb6cd7f72e08a6b45cdf07e6479e493457c0ab12sha512: d8abcfabf47860b692b0410a132e74480b966a21ecb68bd1e17764529b424fb52770048e2076c64f4af0c8a9bdfec3c4de4801417b5b4e5ebac679058049ff4bssdeep: 6144:N19P2yLnafTR93YBgobwN+5AxtyTCjzVm8NKm0/cmzt:Nne883YdbY+5QyTE1KR/cmzttype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (c) 2003-2016 Glarysoft LtdInternalName: Report.exeFileVersion: 5, 0, 0, 6CompanyName:  Glarysoft LtdProductName: Glary UtilitiesProductVersion: 5, 0, 0, 1FileDescription: Glarysoft Crash ReportOriginalFilename: CrashReport.exeTranslation: 0x0804 0x03a8

Win32/Kryptik.HHMS also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
McAfee	Artemis!3A9B6F373122
Cylance	Unsafe
Sangfor	Malware
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Trojan.GenericKD.44515643
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Downloader.Win32.Cridex.haa
ViRobot	Trojan.Win32.Z.Wacatac.613376.H
Rising	Downloader.Cridex!8.F70 (TFE:1:1ll8CADSDMH)
Emsisoft	Trojan.GenericKD.44515643 (B)
F-Secure	Trojan.TR/AD.Dridex.raker
DrWeb	Trojan.Dridex.735
McAfee-GW-Edition	BehavesLike.Win32.Rootkit.hh
FireEye	Generic.mg.3a9b6f3731229534
Sophos	Mal/EncPk-APV
SentinelOne	Static AI – Malicious PE
Avira	TR/AD.Dridex.raker
Antiy-AVL	GrayWare/Win32.Kryptik.ehls
Gridinsoft	Ransom.Win32.Wacatac.oa
Microsoft	Trojan:Win32/Wacatac.C!ml
ZoneAlarm	Trojan-Downloader.Win32.Cridex.haa
GData	Win32.Trojan-Downloader.Dridex.SZKQBT
VBA32	BScope.Trojan.Zbot.01393
Malwarebytes	Trojan.Crypt
ESET-NOD32	a variant of Win32/Kryptik.HHMS
Ikarus	Win32.Outbreak
Fortinet	W32/Kryptik.HHMS!tr
BitDefenderTheta	Gen:NN.ZedlaF.34634.Lu8@aywnVcjj
AVG	Win32:TrojanX-gen [Trj]
Avast	Win32:TrojanX-gen [Trj]
Qihoo-360	HEUR/QVM39.1.51F0.Malware.Gen