Win32/Kryptik.HTTO removal guide

The Win32/Kryptik.HTTO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.HTTO virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Kryptik.HTTO?


File Info:
name: 2403CE130E001B3B4AB2.mlw
path: /opt/CAPEv2/storage/binaries/5947339d08c724fca10329ba2065e57b11670f576f014fbbd7e909faf172da8a
crc32: DF43CFF5
md5: 2403ce130e001b3b4ab2fd8363854a09
sha1: cc85d641fc99a9a0f67667dc0370348bcff4db81
sha256: 5947339d08c724fca10329ba2065e57b11670f576f014fbbd7e909faf172da8a
sha512: 150b26294a64529600fd71e603fe50e5739de384995e555bc33b488ed8d9d1e93871b4f2cf57e0b73e42829c68539e1bec0712a6a51f3af798411ea192f67477
ssdeep: 1536:kscgxqdEYB7kj1V5mF6+euYyqyhuWVFkVJcnag1QO43ClcXcKbuPx6:RF0danmp1YyqyhuWVFrag1t4qx
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T10B93AE227590C032EC974B3194F4CA615EB9F6210BA1C0B737AE4A7A5F503D19BB937E
sha3_384: 5b0ad9f5a818501f18aec7fe1194c730c9c45b25ec0b59ced88f5002cd25a5a5471f806313da6d368a5db2a1ed08946e
ep_bytes: e8ac240000e9a4feffff8bff566a0168
timestamp: 2023-06-07 20:43:10

Version Info:
Comments: Ceci est une application légitime.
CompanyName: Peugeot S.A.
FileDescription: Peugeot S.A. Produkt
FileVersion: 134
InternalName: ApplicationInterne
LegalCopyright: Droits d'auteur Â© Peugeot S.A. Tous droits réservés.
LegalTrademarks: Marques déposées Â© Peugeot S.A.
OriginalFilename: app.exe
ProductName: Application
ProductVersion: 134
Translation: 0x0407 0x04b0

Win32/Kryptik.HTTO also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Strab.4!c
MicroWorld-eScan	Trojan.GenericKD.67426348
FireEye	Trojan.GenericKD.67426348
McAfee	Artemis!2403CE130E00
Malwarebytes	Trojan.MalPack
Sangfor	Trojan.Win32.Kryptik.V646
K7AntiVirus	Trojan ( 005a0fff1 )
Alibaba	Trojan:MSIL/Cryptos.0bba2935
K7GW	Trojan ( 005a0fff1 )
VirIT	Trojan.Win32.GenusT.DMMX
Cyren	W32/Agent.GJO.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.HTTO
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan.Win32.Strab.gen
BitDefender	Trojan.GenericKD.67426348
Avast	Win32:CrypterX-gen [Trj]
Tencent	Msil.Trojan.Cryptos.Zwhl
Emsisoft	Trojan.GenericKD.67426348 (B)
F-Secure	Trojan.TR/AD.Nekark.dhucq
McAfee-GW-Edition	Artemis!Trojan
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan-Spy.Agent
GData	Win32.Packed.Kryptik.JEWAGZ
Webroot	W32.Strab.Gen
Avira	TR/AD.Nekark.dhucq
MAX	malware (ai score=84)
Antiy-AVL	Trojan/Win32.GenKryptik
Arcabit	Trojan.Generic.D404D82C
ZoneAlarm	HEUR:Trojan.Win32.Strab.gen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R585415
VBA32	BScope.Backdoor.Agent
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002H0DF723
Rising	Trojan.Kryptik!8.8 (TFE:1:rReHzpaluGD)
Fortinet	W32/GenKryptik.GHTO!tr
AVG	Win32:CrypterX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32/Kryptik.HTTO?

Win32/Kryptik.HTTO removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X