What is “Win32/Kryptik.HKHQ”?

The Win32/Kryptik.HKHQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.HKHQ virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Anomalous binary characteristics

How to determine Win32/Kryptik.HKHQ?


File Info:
crc32: 3625111D
md5: 691c0bfb53b7e5012c0e60de1fe59728
name: 691C0BFB53B7E5012C0E60DE1FE59728.mlw
sha1: ec7e5feb317065b845fef98dccd191d04e4f3e53
sha256: e4938a8244543631ae11deb46e8b4cc3f0a8b8b7c2d4a1246f5bfadb29e0094c
sha512: ceb3127045cce168bbbe8d62f02ac9eacfbf2e7df6992455bee08adaf7bd0d54f491737111edb11c3ac37f8a323fe0a840d2748747ffa5a6950a5b4d56ad6454
ssdeep: 3072:AbLpZuEskJ1tLQ2WOzP+OAeZd99+43f/oIeVvpxVveZdQ2JPIKqXMQn9tg:AbOq7bAeM1pDGQ2JPSDg
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
0: [No Data]

Win32/Kryptik.HKHQ also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.46029952
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.b31706
Cyren	W32/Injector.AGV.gen!Eldorado
Symantec	Trojan Horse
ESET-NOD32	a variant of Win32/Kryptik.HKHQ
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Trojan-Spy.Win32.Noon.gen
BitDefender	Trojan.GenericKD.46029952
MicroWorld-eScan	Trojan.GenericKD.46029952
Ad-Aware	Trojan.GenericKD.46029952
Sophos	Mal/Generic-S
Comodo	TrojWare.Script.UMal.ekoud@0
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dc
FireEye	Generic.mg.691c0bfb53b7e501
Emsisoft	Trojan.GenericKD.46029952 (B)
Webroot	W32.Noon.Gen
Avira	TR/AD.Swotter.gblqr
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/VBCrypt.MIE!MTB
Arcabit	Trojan.Generic.D2BE5C80
AegisLab	Trojan.Win32.Noon.l!c
ZoneAlarm	HEUR:Trojan-Spy.Win32.Noon.gen
GData	Win32.Trojan-Stealer.FormBook.4MIGBL
AhnLab-V3	Malware/Win.Reputation.R414861
McAfee	RDN/Formbook
MAX	malware (ai score=89)
Rising	Trojan.Kryptik!8.8 (CLOUD)
Ikarus	Trojan.Win32.Crypt
Fortinet	W32/Injector.EPBA!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Heur.Generic.HyoDZb4A

How to remove Win32/Kryptik.HKHQ?

Win32/Kryptik.HKHQ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X