How to remove “Win32/Kryptik.HLID”?

The Win32/Kryptik.HLID is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.HLID virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Network activity detected but not expressed in API logs

How to determine Win32/Kryptik.HLID?


File Info:
crc32: 4CE4AD6F
md5: a3d23470de672761f9ad85ce334f80d0
name: A3D23470DE672761F9AD85CE334F80D0.mlw
sha1: 289e0615617087c425997f4da60c6ffb08d08e51
sha256: abba8d0990bb52ecc9c282ca8e98e83076fbd5d86afe2efecdbc236a5c610de8
sha512: 2e4368142fa4033d7ec4520e591412817c57413b98739afbdb1bb20141dc08b0d6ef5b300f83c794d311e0152f84171f54bd089bb58bb283c7352d17c60d1291
ssdeep: 49152:eardP/fj3aBlgjeyXgEHQyTejqPqGs3FFZ3y1zzITXx9u193Z1oN08:Xtfj3sl+7XgEwyTejqShVFZ3y1HITXxX
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2014-2020 Foxit Software Inc. All Rights Reserved.
InternalName: TrackReview.exe
FileVersion: 10.1.4.37623
CompanyName: Foxit Software Inc.
ProductName: Foxit Track Review
ProductVersion: 10.1.4.37623
FileDescription: Track Review
OriginalFilename: Foxit Track Review
Translation: 0x0000 0x04b0

Win32/Kryptik.HLID also known as:

DrWeb	Trojan.Inject4.12499
Sangfor	Suspicious.Win32.Artemis.A3D23470DE67
ESET-NOD32	a variant of Win32/Kryptik.HLID
Avast	Win32:DangerousSig [Trj]
BitDefender	Trojan.GenericKD.46469094
MicroWorld-eScan	Trojan.GenericKD.46469094
Ad-Aware	Trojan.GenericKD.46469094
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Trojan.GenericKD.46469094
Emsisoft	MalCert.A (A)
Webroot	W32.Malware.Gen
GData	Trojan.GenericKD.46469094
McAfee	Artemis!A3D23470DE67
MAX	malware (ai score=86)
Fortinet	W32/Kryptik.HLID!tr
AVG	Win32:DangerousSig [Trj]

How to remove Win32/Kryptik.HLID?

Win32/Kryptik.HLID removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X