Win32/Kryptik.HRIO removal

The Win32/Kryptik.HRIO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.HRIO virus can do?

Sample contains Overlay data
Unconventionial language used in binary resources: Tswana
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/Kryptik.HRIO?


File Info:
name: 982527FA49E0B3100C77.mlw
path: /opt/CAPEv2/storage/binaries/ff233ede35d80ae199f5bbba42801b7d52fdd1d96b12585f359cb752cf7f8a9e
crc32: B406A296
md5: 982527fa49e0b3100c776763a55463f0
sha1: cf15fcd699dcf9c5fc8e50e3ed2d25fe30f4b1bb
sha256: ff233ede35d80ae199f5bbba42801b7d52fdd1d96b12585f359cb752cf7f8a9e
sha512: 3e718b2cc6d5239bcfa3d01a96847563640ac6f174e1a74736115f3d8199f2841045504f3524e5f39cfdb96a8d6459592af4eacd44c443732bb00da33361023e
ssdeep: 3072:F3XOAgbq42TxtUmX159ucLZ8qq6YQ1Z3V+zgQegMYu1z4Cr2JsM/h31vvvvvvvvv:xKbqTLFucLLTVYgtYOzIy
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10BB62932A631044DD0A460FD3FAD7B2EDB8F91B8913D16E3408D95E3A9B33566DEA443
sha3_384: 8af477f84b044d490ee2f00b546fd7db01742ddc1fa65076e8c3922c24c2c15393e6fcbbd54178112bf614484eb50744
ep_bytes: e8cc560000e978feffffcccccccccccc
timestamp: 2021-06-05 01:30:51

Version Info:
FileVersions: 68.78.22.14
InternationalName: povgwaoci.iwe
Copyright: Copyright (C) 2022, somoklos
ProjectVersion: 98.66.15.65

Win32/Kryptik.HRIO also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen18.65062
MicroWorld-eScan	Gen:Variant.Symmi.68644
FireEye	Generic.mg.982527fa49e0b310
ALYac	Gen:Variant.Symmi.68644
Malwarebytes	Trojan.MalPack.GS
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.a49e0b
Arcabit	Trojan.Symmi.D10C24
Cyren	W32/Kryptik.HUW.gen!Eldorado
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Kryptik.HRIO
APEX	Malicious
BitDefender	Gen:Variant.Symmi.68644
Ad-Aware	Gen:Variant.Symmi.68644
Sophos	ML/PE-A + Troj/Krypt-RQ
VIPRE	Gen:Variant.Symmi.68644
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Symmi.68644 (B)
SentinelOne	Static AI – Malicious PE
Google	Detected
Antiy-AVL	Trojan/Win32.Convagent
Microsoft	Trojan:Win32/Raccoon.RE!MTB
GData	Gen:Variant.Symmi.68644
Cynet	Malicious (score: 100)
AhnLab-V3	Dropper/Win.DropperX-gen.R531894
Acronis	suspicious
MAX	malware (ai score=85)
Rising	Trojan.Generic@AI.100 (RDML:EeTj5RV0eWSeDH1iEcapeA)
Ikarus	Trojan.Win32.Azorult
Fortinet	W32/Kryptik.HHTS!tr

How to remove Win32/Kryptik.HRIO?

Win32/Kryptik.HRIO removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X