About “Win32/Kryptik.HJZX” infection

The Win32/Kryptik.HJZX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.HJZX virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Turkish
The binary likely contains encrypted or compressed data.
Attempts to modify proxy settings
Anomalous binary characteristics

How to determine Win32/Kryptik.HJZX?


File Info:
crc32: C9CA63BA
md5: be4d43b565846dcc51c813328a759915
name: BE4D43B565846DCC51C813328A759915.mlw
sha1: 4c92394b13d2531acf5f939cdc9f4f9f28fab26d
sha256: 4f42a3f5ab0feccba70fb3637052bb95359d2152f1b73d787b25ba0f75cec13a
sha512: 1e8f556c4b40e6e64d8fd58bd3f1c5c2b33d191840a9968e4ceb3181f9c4f60574545ad012406ef05c45a81e6f4732926798f597f0d02e91faa13b4dcec2f852
ssdeep: 12288:BBedjfZQx1w9iDvJH/YDOOb/bzp/6QIhbHzqOCQH9a5kDyh:mFfK1hyFrvp/bdOCQcAC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
InternalName: calimatimodunados.exe
FileVersions: 7.0.2.54
LegalCopyrights: Vsekda
ProductVersions: 7.0.21.45
Translation: 0x0129 0x04ff

Win32/Kryptik.HJZX also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (D)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HJZX
APEX	Malicious
Kaspersky	UDS:DangerousObject.Multi.Generic
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZexaF.34628.Lu0@ay06tieG
McAfee-GW-Edition	BehavesLike.Win32.Trojan.hc
FireEye	Generic.mg.be4d43b565846dcc
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_71%
Microsoft	Trojan:Win32/Glupteba!ml
Gridinsoft	Trojan.Heur!.02854021
Acronis	suspicious
McAfee	Artemis!BE4D43B56584
Malwarebytes	Trojan.MalPack.GS
Rising	Malware.Heuristic!ET#98% (RDMK:cmRtazqlk6jF8QxLvj2DUU6q6TjN)
Paloalto	generic.ml
Qihoo-360	HEUR/QVM10.1.F93B.Malware.Gen

How to remove Win32/Kryptik.HJZX?

Win32/Kryptik.HJZX removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X