Categories: Malware

Should I remove “Win32/Kryptik.HILJ”?

The Win32/Kryptik.HILJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HILJ virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
A process created a hidden window
Uses Windows utilities for basic functionality
Executed a process and injected code into it, probably while unpacking
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Kryptik.HILJ?


File Info:
crc32: E28E1ABCmd5: 0d0aba8a90a5cba3f52921c1e8a0f8caname: 0D0ABA8A90A5CBA3F52921C1E8A0F8CA.mlwsha1: 84db38ca2e87cd7d07d0ce7814dec59764603be6sha256: b35c779eb98a42e0c0177db20f618c70b98461a515f28f3bc2d306dea4e29d3fsha512: 7a88f994d0f41507846023d2116e55b6b849430c6c68aaeb6d1a19f98667bfd118f77cc934a4e3b81f304349af8a1897a14c95bc374d197b1fd42804ac3d794dssdeep: 6144:xY+9DR9L2Y6fGKUjts0/UCLk3+gA5sE5uHd6sRRR:akvIfnMs596S96type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Kryptik.HILJ also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.45150552
FireEye	Generic.mg.0d0aba8a90a5cba3
ALYac	Trojan.GenericKD.45150552
Sangfor	Malware
K7AntiVirus	Spyware ( 0040f0131 )
BitDefender	Trojan.GenericKD.45150552
K7GW	Spyware ( 0040f0131 )
CrowdStrike	win/malicious_confidence_100% (D)
Cyren	W32/Qbot.BP.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:BankerX-gen [Trj]
Kaspersky	Trojan-Banker.Win32.RTM.har
Alibaba	TrojanBanker:Win32/Qakbot.f6e7554d
Ad-Aware	Trojan.GenericKD.45150552
Sophos	ML/PE-A + Mal/EncPk-APV
TrendMicro	TROJ_GEN.R002C0DLP20
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Trojan.GenericKD.45150552 (B)
Jiangmin	Trojan.Banker.RTM.uk
Antiy-AVL	GrayWare/Win32.Kryptik.ehls
Microsoft	Trojan:Win32/Qakbot.GP!MTB
Gridinsoft	Trojan.Win32.Kryptik.oa
Arcabit	Trojan.Generic.D2B0F158
ZoneAlarm	Trojan-Banker.Win32.RTM.har
GData	Trojan.GenericKD.45150552
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.R360541
McAfee	GenericRXND-PG!0D0ABA8A90A5
MAX	malware (ai score=88)
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Kryptik.HILJ
TrendMicro-HouseCall	TROJ_GEN.R002C0DLP20
Rising	Trojan.Kryptik!8.8 (TFE:2:ItOo6ejRx2)
Fortinet	W32/Kryptik.DZZ!tr
BitDefenderTheta	Gen:NN.ZedlaF.34700.HI4@aC!jPIDi
AVG	Win32:BankerX-gen [Trj]
Paloalto	generic.ml