Malware

Win32/Kryptik.HIYI removal

Malware Removal

The Win32/Kryptik.HIYI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HIYI virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Mimics the system’s user agent string for its own requests
  • Expresses interest in specific running processes
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

How to determine Win32/Kryptik.HIYI?


File Info:

crc32: D6757C19
md5: 389b820ab69096930cc0cfcb376f46d0
name: 389B820AB69096930CC0CFCB376F46D0.mlw
sha1: 50209936ec08f9e8f547da3a78bcc39d581b2f78
sha256: cb0ccf3ec6c3a7e4c0629b5fe4b752f2a6093c0d044dae20d6f21190604462d8
sha512: b29770b677c076c34f6e317f9c4380ca4542d389bad27a9290bcd62da8477e3d90ef73f9924dd2fd5ffe1ec3e221a506a11301db1aa02df8c90b7ab4669c83a2
ssdeep: 3072:sfv8SZbCiGFeDN7X1qfJvQ+OMv3PmMWZqQi237fpKuiMYAx7s:6LuimeDN7X8fJvNRfPmaQb7cuimBs
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Kryptik.HIYI also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
FireEyeGeneric.mg.389b820ab6909693
CylanceUnsafe
SangforMalware
K7AntiVirusSpyware ( 0040f0131 )
K7GWSpyware ( 0040f0131 )
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderThetaGen:NN.ZedlaF.34780.uG5@aKrpe7i
CyrenW32/Emotet.BAP.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HIYI
APEXMalicious
RisingTrojan.Ransom-Locky!8.4655 (TFE:3:I8Xkv9dcP1S)
SophosML/PE-A
DrWebTrojan.Emotet.1100
McAfee-GW-EditionW32/PinkSbot-HJ!389B820AB690
SentinelOneStatic AI – Suspicious PE
Antiy-AVLGrayWare/Win32.Kryptik.ehls
MicrosoftProgram:Win32/Wacapew.C!ml
GridinsoftTrojan.Win32.Kryptik.oa!s1
CynetMalicious (score: 100)
McAfeeW32/PinkSbot-HJ!389B820AB690
VBA32BScope.Trojan.Chanitor
MalwarebytesMalware.Heuristic.1001
PandaTrj/Emotet.D
IkarusTrojan-Banker.Emotet
eGambitPE.Heur.InvalidSig
Qihoo-360HEUR/QVM39.1.BD87.Malware.Gen

How to remove Win32/Kryptik.HIYI?

Win32/Kryptik.HIYI removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment