Malware

Should I remove “Win32/Kryptik.HKNU”?

Malware Removal

The Win32/Kryptik.HKNU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HKNU virus can do?

  • Attempts to connect to a dead IP:Port (2 unique times)
  • Performs some HTTP requests
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Anomalous binary characteristics

Related domains:

svp7wp.xyz
ocsp.digicert.com

How to determine Win32/Kryptik.HKNU?


File Info:

crc32: 6ACB5367
md5: 9243963de938007f8a420aee384409d4
name: 9243963DE938007F8A420AEE384409D4.mlw
sha1: b1d63f5832fab1fe6f33bfe3dc2dde7ac92446f8
sha256: e5a364e1bdeb7e8a2a477405e43da2a2900b2e685fa103a70f740d3a3daec2c7
sha512: fefa901e052f3cea8b790507e952e518e4ee99a8e63039751293402edd3ff237dc408a421dbe632ba66bf167c506e8368ea553abc9c119473f2c50609bd0e3ec
ssdeep: 6144:bTEaV0m0HQxc33mtBFCtqlcwY29pFoWeqMS4:MH3WtBFCtk79pFoW3C
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x7248x6743x6240x6709 (C) 1999
InternalName: DlgToolbar
FileVersion: 1, 0, 0, 1
CompanyName:
LegalTrademarks:
ProductName: DlgToolbar x5e94x7528x7a0bx5e8f
ProductVersion: 1, 0, 0, 1
FileDescription: DlgToolbar Microsoft x57fax7840x7c7bx5e94x7528x7a0bx5e8f
OriginalFilename: DlgToolbar.EXE
Translation: 0x0804 0x04b0

Win32/Kryptik.HKNU also known as:

ALYacGen:Variant.Graftor.318157
CylanceUnsafe
CrowdStrikewin/malicious_confidence_60% (W)
AlibabaTrojan:Win32/Kryptik.d880cf66
Cybereasonmalicious.de9380
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HKNU
APEXMalicious
AvastFileRepMalware
BitDefenderGen:Variant.Graftor.318157
MicroWorld-eScanGen:Variant.Graftor.318157
Ad-AwareGen:Variant.Graftor.318157
BitDefenderThetaGen:NN.ZexaF.34684.sq0@a09RXklj
McAfee-GW-EditionArtemis!Trojan
FireEyeGen:Variant.Graftor.318157
EmsisoftGen:Variant.Graftor.318157 (B)
eGambitUnsafe.AI_Score_67%
MicrosoftTrojan:Win32/Hynamer.C!ml
AegisLabTrojan.Win32.Graftor.4!c
GDataGen:Variant.Graftor.318157
McAfeeArtemis!9243963DE938
MAXmalware (ai score=84)
VBA32suspected of Trojan.Downloader.gen
RisingTrojan.Kryptik!8.8 (CLOUD)
IkarusBackdoor.Farfli
FortinetW32/Kryptik.HKNU!tr
AVGFileRepMalware

How to remove Win32/Kryptik.HKNU?

Win32/Kryptik.HKNU removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment