Win32/Kryptik.HKSZ removal guide

The Win32/Kryptik.HKSZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HKSZ virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (3 unique times)
Creates RWX memory
At least one IP Address, Domain, or File Name was found in a crypto call
Reads data out of its own binary image
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Looks up the external IP address

Related domains:

api.ipify.org

158.102.105.176.zen.spamhaus.org

158.102.105.176.cbl.abuseat.org

How to determine Win32/Kryptik.HKSZ?


File Info:
crc32: A18ED7C0
md5: 35cde59e3a0c0ca99861e9d6e8a3e6c8
name: 35CDE59E3A0C0CA99861E9D6E8A3E6C8.mlw
sha1: 815daf078d96d2b44debe7ca8b99edfb0d24491d
sha256: 0f20beba8cb828a6d6315433ea79701efb3bfba8908053f6825f1a9fb33a64e3
sha512: 1bf8d33e440b93790acda40c1e132a91cd63c32ec6152d88cb36c50e222488efa1a78fd6826ef1a12054fe51e6ef4b566a0d5411b8b9dda2da1871097ab71da8
ssdeep: 12288:3Y8Id8iWYsKYt3o4iek/WGtMqZtEfl4GnFfTWokO:i8i9c9pd9sMqTaRn1bk
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2003 Hans Dietrich
FileVersion: 1, 2, 0, 1
ProductName: XGetoptTest
E-mail: hdietrich2@hotmail.com
ProductVersion: 1, 2, 0, 1
FileDescription: XGetoptTest.exe
OriginalFilename: XGetoptTest.exe
Translation: 0x0409 0x04b0

Win32/Kryptik.HKSZ also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Riskware ( 0040eff71 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CrowdStrike	win/malicious_confidence_60% (D)
BitDefender	Trojan.GenericKDZ.74982
K7GW	Riskware ( 0040eff71 )
Cyren	W32/Kryptik.EAP.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HKSZ
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Trickpak.gen
MicroWorld-eScan	Trojan.GenericKDZ.74982
Ad-Aware	Trojan.GenericKDZ.74982
Sophos	ML/PE-A
McAfee-GW-Edition	BehavesLike.Win32.Emotet.jh
FireEye	Generic.mg.35cde59e3a0c0ca9
eGambit	Unsafe.AI_Score_55%
Microsoft	Trojan:Win32/Trickbot.GKM!MTB
Gridinsoft	Trojan.Win32.Kryptik.dd!n
GData	Trojan.GenericKDZ.74982
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.3151602067
Panda	Trj/Genetic.gen
Rising	Trojan.Injector!8.C4 (C64:YzY0OrDfUzom+F9g)
Fortinet	W32/Agent.FHAD!tr

How to remove Win32/Kryptik.HKSZ?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Kryptik.HKSZ removal guide