Malware

Win32/Kryptik.HIYJ removal tips

Malware Removal

The Win32/Kryptik.HIYJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HIYJ virus can do?

  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Kryptik.HIYJ?


File Info:

crc32: 60AA07C1
md5: f2243e2ab0fd20ca26d17bf291c8cd50
name: F2243E2AB0FD20CA26D17BF291C8CD50.mlw
sha1: aa89d79b43e4e3cbf8736a6cc85ee3d828fadcea
sha256: 05829794dae9266544043ed95df4d9a887ecd17adb1b8a77e828d861f4199f1a
sha512: 0417f9db01ddd8e7ee4e38f7611ef43d67ff1761d261e9eb5b74c02573a8c1cfd9dcb238b0da7361436666ff37b3249fa1bff129f86cb0ee536140b118d0319a
ssdeep: 1536:v0JIrfiM7HlYkZwpGTm8dZxI4wb7eSpg3stpDASjE1POo9/DX2BXR5Yu:cOOMrlnZWaZxI4wb7Dtpw1POQ
type: MS-DOS executable, MZ for MS-DOS

Version Info:

0: [No Data]

Win32/Kryptik.HIYJ also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Variant.Ransom.RotorCrypt.15
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaVirTool:Win32/Obfuscator.ac7bebfe
Cybereasonmalicious.ab0fd2
BaiduWin32.Trojan.Kryptik.rb
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HIYJ
APEXMalicious
AvastFileRepMalware
ClamAVWin.Trojan.Poison-9764285-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Ransom.RotorCrypt.15
NANO-AntivirusTrojan.Win32.GenKryptik.flnlbv
MicroWorld-eScanGen:Variant.Ransom.RotorCrypt.15
TencentWin32.Trojan.Generic.Dzsu
Ad-AwareGen:Variant.Ransom.RotorCrypt.15
SophosMal/Generic-R + Mal/Elenoocka-E
ComodoTrojWare.Win32.Crypt.C@7vajd0
BitDefenderThetaGen:NN.ZexaF.34058.fmqaaeg8Z2h
TrendMicroRansom_CERBER.SMALY0
McAfee-GW-EditionBehavesLike.Win32.Generic.mc
FireEyeGeneric.mg.f2243e2ab0fd20ca
EmsisoftGen:Variant.Ransom.RotorCrypt.15 (B)
SentinelOneStatic AI – Malicious PE
JiangminBackdoor.Poison.bcj
WebrootW32.Trojan.Gen
AviraTR/Dropper.Gen
eGambitUnsafe.AI_Score_62%
Antiy-AVLTrojan/Generic.ASMalwS.226F976
MicrosoftVirTool:Win32/Obfuscator.ARL
ArcabitTrojan.Ransom.RotorCrypt.15
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Ransom.RotorCrypt.15
AhnLab-V3Malware/RL.Ransom_cerber.R245195
Acronissuspicious
McAfeeArtemis!F2243E2AB0FD
MAXmalware (ai score=87)
VBA32Backdoor.Poison
PandaTrj/CI.A
TrendMicro-HouseCallRansom_CERBER.SMALY0
RisingTrojan.Kryptik!1.AE8C (CLASSIC)
YandexTrojan.GenAsa!yRf6TM0vavk
IkarusTrojan.Dropper
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GKMB!tr
AVGFileRepMalware
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Obfuscated.HxIBEpsA

How to remove Win32/Kryptik.HIYJ?

Win32/Kryptik.HIYJ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment