Should I remove “Win32/Kryptik.HQVW”?

The Win32/Kryptik.HQVW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.HQVW virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Win32/Kryptik.HQVW?


File Info:
name: 739F06CCE78B7DABDD75.mlw
path: /opt/CAPEv2/storage/binaries/384dd90ae711c0a2ada0ce278b8d3a4eaebcaa35a124eb011fdf8017e3d2187c
crc32: 1F10FC87
md5: 739f06cce78b7dabdd75a98b9676a2b9
sha1: 5e5be0d8f1c5d64628755d3848c70177885d382d
sha256: 384dd90ae711c0a2ada0ce278b8d3a4eaebcaa35a124eb011fdf8017e3d2187c
sha512: 2051565322d4b5a7d4594bda6d44b30577a7d3ee9d72815e26a1d39f001001251585169a83081e77a012b2f454e82827e0b921a2e40ce14db759b14cc6ae3803
ssdeep: 6144:S+ILYzdHpohvqMknq+bKxGlYjI1JkfiV7vFLQiUR7j:5IL4Hnq++xGlY+Jkqq7
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1F8448D4C34D19033D477253D9CF4967286EDAC304AE39ABF621709ED1A28DE1DB3A51E
sha3_384: c80dd7693228a2d3b7db120ea5838a2ebb63b17cf31fc657c414b7c501384f40dc20fcc55183ac1171dbd6e12193b39f
ep_bytes: e804040000e974feffff558bec6a00ff
timestamp: 2022-09-20 12:00:20

Version Info:
0: [No Data]

Win32/Kryptik.HQVW also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.StealerNET.125
FireEye	Generic.mg.739f06cce78b7dab
CAT-QuickHeal	Ransomware.Tescrypt.WR5
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.8f1c5d
BitDefenderTheta	Gen:NN.ZexaF.34646.pqW@aqVz6Nj
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HQVW
APEX	Malicious
Paloalto	generic.ml
Kaspersky	VHO:Trojan-PSW.Win32.Convagent.gen
Avast	PWSX-gen [Trj]
Sophos	Generic ML PUA (PUA)
Trapmine	malicious.moderate.ml.score
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.C5142678
Acronis	suspicious
Rising	Trojan.Generic@AI.100 (RDML:SgvNZ0mRB/ytroNqy7+FgQ)
AVG	PWSX-gen [Trj]
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Win32/Kryptik.HQVW?

Win32/Kryptik.HQVW removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X