Categories: Malware

Win32/Kryptik.HLUC removal guide

The Win32/Kryptik.HLUC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HLUC virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
Sniffs keystrokes
Network activity detected but not expressed in API logs
Detects VirtualBox through the presence of a file
Detects VMware through the presence of a file
Attempts to access Bitcoin/ALTCoin wallets
Harvests credentials from local FTP client softwares
Harvests information related to installed mail clients
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Kryptik.HLUC?


File Info:
crc32: 6CD03978md5: c322f85e6710cb835efee217addd9a8bname: C322F85E6710CB835EFEE217ADDD9A8B.mlwsha1: 7f90b476e41cd3f030c255c650def5f0c29cd0f9sha256: 9b92adeb64ee21a611a7cea841101f878e78d37cbafbd51771416ad5edff9865sha512: dae142b026e8a45146f9fb9fd086f53b413ec986ab7ea472dde685da0c9d409bc5728e6070a9d6552f8af02737d654a886db9a3c4839a84f48ee1b81c19b9ff6ssdeep: 6144:g8EY/1Wauh8f6JdRpmt0oPo8zlq9esLY9zF9YWvZey7:g8Ey1WgfyHpmS0z49el9YM8y7type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Kryptik.HLUC also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Zusy.394472
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Generic.3b63347a
Cybereason	malicious.6e41cd
Cyren	W32/Agent.DDT.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HLUC
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	Trojan-Banker.Win32.Emotet.ggtc
BitDefender	Gen:Variant.Zusy.394472
MicroWorld-eScan	Gen:Variant.Zusy.394472
Ad-Aware	Gen:Variant.Zusy.394472
Sophos	Mal/Generic-S + Troj/Zbot-PLU
BitDefenderTheta	Gen:NN.ZexaF.34050.viZ@amUeD@h
McAfee-GW-Edition	BehavesLike.Win32.VirRansom.fc
FireEye	Generic.mg.c322f85e6710cb83
Emsisoft	Gen:Variant.Zusy.394472 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Redcap.msijf
Microsoft	Trojan:Win32/VirRansom.DM!MTB
GData	Gen:Variant.Zusy.394472
McAfee	Artemis!C322F85E6710
MAX	malware (ai score=80)
VBA32	BScope.Trojan-Dropper.Injector
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R06CH0CGL21
Rising	Trojan.Generic@ML.84 (RDML:XQdzvLfav7N3ZAu5ELwkXg)
Ikarus	Trojan-Spy.FormBook
Fortinet	W32/Johnnie.AEAA!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	HEUR/QVM20.1.C13F.Malware.Gen