Categories: Malware

Should I remove “Win32/Kryptik.HJYL”?

The Win32/Kryptik.HJYL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HJYL virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Turkish
The binary likely contains encrypted or compressed data.
Collects information to fingerprint the system
Anomalous binary characteristics

How to determine Win32/Kryptik.HJYL?


File Info:
crc32: 6021360Amd5: 2e947f5ead2f5d58124c9923e1e2849cname: 2E947F5EAD2F5D58124C9923E1E2849C.mlwsha1: 711f35a83681fd73b23fd2f2193fa08ad953a546sha256: 6296905cf4a331aa9a278c3df71c8e6cb3c1e60b48402696264aac0f4d0df659sha512: 4003a73174e49dcebadaab0b700ab19e3b6f19131626bf1f9f420a843dca6782cb04c6c51a956bb32de32d43a797e305cd00a330bd7eb80f3c9ce068714d6b23ssdeep: 6144:9mO9ueehDC7PkPOhbJT06esz6q0s5hxe1JDH5GbhjyVRcUQ6+Og0b:9d9+hDkPkPOJT0DsVMPDH54kR9+Ovtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
InternalName: calimatimodunador.exeFileVersions: 7.0.2.54LegalCopyrights: VsekdarProductVersions: 7.0.21.45Translation: 0x0129 0x04f4

Win32/Kryptik.HJYL also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Riskware ( 0040eff71 )
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Steam.19038
Cynet	Malicious (score: 100)
ALYac	Spyware.Infostealer.Azorult
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/ArkeiStealer.446cd737
K7GW	Riskware ( 0040eff71 )
Cyren	W32/Kryptik.DPT.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HJYL
Zoner	Trojan.Win32.106234
APEX	Malicious
Avast	Win32:BotX-gen [Trj]
ClamAV	Win.Malware.Bulz-9842209-0
Kaspersky	Trojan-PSW.Win32.Coins.abdh
BitDefender	Trojan.GenericKD.36508306
ViRobot	Trojan.Win32.Z.Coins.331776
MicroWorld-eScan	Trojan.GenericKD.36508306
Tencent	Win32.Trojan-qqpass.Qqrob.Hupw
Ad-Aware	Trojan.GenericKD.36508306
Sophos	Mal/Generic-S
Comodo	Malware@#3536npujcu4tc
BitDefenderTheta	Gen:NN.ZexaF.34628.uq0@aOpffPcG
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Trojan.Win32.GLUPTEBA.THCAFBA
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
FireEye	Generic.mg.2e947f5ead2f5d58
Emsisoft	Trojan.Crypt (A)
Webroot	W32.Trojan.Glupteba
Kingsoft	Win32.PSWTroj.Coins.ab.(kcloud)
Microsoft	Trojan:Win32/ArkeiStealer.RM!MTB
AegisLab	Trojan.Multi.Generic.4!c
GData	Win32.Trojan.PSE.18AAYXX
AhnLab-V3	Trojan/Win32.GenericKDZ.R372613
Acronis	suspicious
McAfee	Packed-GDJ!2E947F5EAD2F
VBA32	Trojan.Glupteba
Malwarebytes	Trojan.MalPack.GS
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Trojan.Win32.GLUPTEBA.THCAFBA
Rising	Trojan.Kryptik!8.8 (CLOUD)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:BotX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.HwoC604A