Categories: Malware

How to remove “Win32/Kryptik.HTWT”?

The Win32/Kryptik.HTWT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HTWT virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Presents an Authenticode digital signature
CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Kryptik.HTWT?


File Info:
name: 3468E2708F26D2B16C76.mlwpath: /opt/CAPEv2/storage/binaries/8650d25614426a45cf76efd99af57b63e8e3e7a1f180a246298936161fcc88a1crc32: DEBB406Dmd5: 3468e2708f26d2b16c76ec30c5939a34sha1: 656a50d4bee600a1b7ecf730a865d82f61f1f987sha256: 8650d25614426a45cf76efd99af57b63e8e3e7a1f180a246298936161fcc88a1sha512: 1fb517d24d6e2d16228399907d79f35f0f144c939221a71ee4580d1f908bb8e052971c41f5643bf3fae904470c44a792c9847be7cd49d78e818e0a8b84f6bbf7ssdeep: 6144:9+lVrmzXcEFV4uYzXTVfR5HE+aX+iexf2EtQuk2K6mVnMg0UTDa:9+XmoEFGuYzXTiXGxf2EtQuk2K6mVnM8type: PE32 executable (console) Intel 80386, for MS Windowstlsh: T1914439B17DE0B035D3E16FBF1BB44E5DB719D2851A00AB4B3BB84EC01712B86A71D686sha3_384: cf58123089e344fe0673274e0930aa4030a942d3d473d9026f0ef4f41b4c666174261fc708f42724031c8b23dcdc687dep_bytes: e8a3020000e974feffff558bec8b4508timestamp: 2023-07-08 15:53:23
Version Info:
0: [No Data]

Win32/Kryptik.HTWT also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agent.Y!c
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.37076
MicroWorld-eScan	Gen:Variant.Lazy.360290
FireEye	Generic.mg.3468e2708f26d2b1
CAT-QuickHeal	Backdoor.Agent
ALYac	Gen:Variant.Lazy.360290
Cylance	unsafe
VIPRE	Gen:Variant.Lazy.360290
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 005a86911 )
Alibaba	Backdoor:Win32/Kryptik.bc76dcb3
K7GW	Trojan ( 005a86911 )
Cybereason	malicious.4bee60
BitDefenderTheta	Gen:NN.ZexaF.36318.qqY@aygkvGo
Cyren	W32/Kryptik.KDU.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HTWT
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Backdoor.Win32.Agent.gen
BitDefender	Gen:Variant.Lazy.360290
Avast	Win32:PWSX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10bf054e
Emsisoft	Gen:Variant.Lazy.360290 (B)
F-Secure	Trojan.TR/AD.RedLineSteal.fhdwe
TrendMicro	TROJ_GEN.R002C0DGC23
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.PSE.133O5LU
Avira	TR/AD.RedLineSteal.fhdwe
Antiy-AVL	Trojan/Win32.Kryptik
Arcabit	Trojan.Lazy.D57F62
ViRobot	Trojan.Win.Z.Lazy.272034.B
ZoneAlarm	HEUR:Backdoor.Win32.Agent.gen
Microsoft	Trojan:Win32/Redline.DAP!MTB
Google	Detected
AhnLab-V3	Trojan/Win.PWSX-gen.R590332
McAfee	Redline-FDQW!3468E2708F26
MAX	malware (ai score=84)
Malwarebytes	Trojan.SmokeLoader
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0DGC23
Rising	Stealer.Agent!8.C2 (TFE:1:RyHVWXILP9P)
Ikarus	Win32.Outbreak
MaxSecure	PSW.W32.Coins.gen_265938
Fortinet	W32/Kryptik.HTWT!tr
AVG	Win32:PWSX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)