How to remove "Win32/Kryptik.HJRK"?

The Win32/Kryptik.HJRK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HJRK virus can do?

Executable code extraction
Creates RWX memory
Attempts to connect to a dead IP:Port (5 unique times)
Performs some HTTP requests
Unconventionial binary language: Persian (Iran)
Unconventionial language used in binary resources: Slovak
The binary likely contains encrypted or compressed data.
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

telete.in

apps.identrust.com

greenmile.top

How to determine Win32/Kryptik.HJRK?


File Info:
crc32: 80CABF81
md5: a04d426b8812c6fa62ed3857e38acddb
name: A04D426B8812C6FA62ED3857E38ACDDB.mlw
sha1: dc860c84193c470568639e8743f703e6720ffb50
sha256: 063d7b432fa85262f3515bbd8b51f81f3461a2e413b5782471ee5ab08fca59c0
sha512: cad282b10279d64f4f7f5a1be0c2d98f57088c8f67903ca44d629e77fa2f09216ca30de9481c2a8c589fde55dc89ecaefc3b8aa5f66f0c77bde9b4f6d6a32396
ssdeep: 12288:28ShMgAGq9THO1cor38+X3/rDuWYJlj0YSvtFS+EtTVSJ2CIA:2bAdOVr38CDuZK/TeVVS0CIA
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
InternalName: calimalimodunator.exe
FileVersions: 7.0.0.23
LegalCopyrights: Vsekdag
ProductVersions: 67.0.20.45
Translation: 0x0429 0x04e7

Win32/Kryptik.HJRK also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
FireEye	Generic.mg.a04d426b8812c6fa
McAfee	Artemis!A04D426B8812
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.45799226
K7GW	Riskware ( 0040eff71 )
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
Kaspersky	UDS:DangerousObject.Multi.Generic
Rising	Backdoor.Mokes!8.619 (TFE:dGZlOgawkQ9TRCvxSg)
Emsisoft	Trojan.GenericKD.45799226 (B)
DrWeb	Trojan.PWS.Siggen2.61964
McAfee-GW-Edition	BehavesLike.Win32.Generic.hc
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Azorult!ml
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Trojan.GenericKD.45799226
Cynet	Malicious (score: 100)
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.34590.IC0@aa9JEMkG
VBA32	BScope.Backdoor.Mokes
Malwarebytes	Trojan.MalPack.GS
ESET-NOD32	a variant of Win32/Kryptik.HJRK
eGambit	Unsafe.AI_Score_96%
Fortinet	PossibleThreat.PALLAS.H
AVG	FileRepMalware
CrowdStrike	win/malicious_confidence_60% (D)
Qihoo-360	HEUR/QVM10.1.9077.Malware.Gen

How to remove Win32/Kryptik.HJRK?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Win32/Kryptik.HJRK”?