Malware

About “Win32/Kryptik.HMIO” infection

Malware Removal

The Win32/Kryptik.HMIO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HMIO virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Network activity detected but not expressed in API logs

How to determine Win32/Kryptik.HMIO?


File Info:

crc32: C2A0FB5D
md5: 628860616077007bc4d566b9adc4f155
name: 628860616077007BC4D566B9ADC4F155.mlw
sha1: 2794be7055930c52739d28f33232c47085555383
sha256: a08b7b8228c550f029e60c9b05da2246c5457e646d4a80b336d7c4d0213f3b08
sha512: 885b106a1e405912d67f3fb43508220743043bf3f37785e5e692b4005885fc84a3518dcfac0bfddf6a890e20012e37175315cb34d65a3a1d4bbc23212cb9345d
ssdeep: 98304:8Si9c25PD5YkqFeVQriVlhlNA395PP821msuZZLCDnWDkP1X:rsqEQuVlhAPXI5CDcktX
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
FileVersion:
CompanyName:
Comments: This installation was built with Inno Setup.
ProductName: Eaque
ProductVersion: 3.10.6.0
FileDescription: Eaque Setup
OriginalFileName:
Translation: 0x0000 0x04b0

Win32/Kryptik.HMIO also known as:

K7AntiVirusTrojan ( 0057fc431 )
LionicTrojan.Win32.Adload.a!c
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
ALYacTrojan.GenericKD.37463111
CylanceUnsafe
CrowdStrikewin/malicious_confidence_60% (D)
AlibabaAdWare:Win32/AdLoad.6ba47fc3
K7GWTrojan ( 0057fc431 )
CyrenW32/Agent.COB.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/Kryptik.HMIO
AvastWin32:AdwareX-gen [Adw]
KasperskyTrojan-Downloader.Win32.Adload.spyu
BitDefenderTrojan.GenericKD.37463111
NANO-AntivirusTrojan.Win32.Adload.iznqtn
MicroWorld-eScanTrojan.GenericKD.37463111
TencentWin32.Trojan-downloader.Adload.Wnmm
Ad-AwareTrojan.GenericKD.37463111
SophosMal/Generic-R
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0RHN21
McAfee-GW-EditionBehavesLike.Win32.Dropper.rc
FireEyeTrojan.GenericKD.37463111
EmsisoftTrojan.GenericKD.37463111 (B)
AviraHEUR/AGEN.1142027
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataWin32.Trojan.BSE.W4BXSV
McAfeeArtemis!628860616077
MAXmalware (ai score=86)
VBA32TrojanDownloader.Adload
MalwarebytesAdware.DownloadAssistant
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0RHN21
IkarusTrojan.Win32.Crypt
FortinetRiskware/Adload
AVGWin32:AdwareX-gen [Adw]
Paloaltogeneric.ml

How to remove Win32/Kryptik.HMIO?

Win32/Kryptik.HMIO removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment