Malware

Win64/Kryptik.CMY removal tips

Malware Removal

The Win64/Kryptik.CMY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Win64/Kryptik.CMY virus can do?

  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Win64/Kryptik.CMY?



File Info:

crc32: 3715F36D
md5: 67736c803c7c0897a744ed61a8c38439
name: 67736C803C7C0897A744ED61A8C38439.mlw
sha1: 5a5cedb014a794865cc8cb39ee88e28aaffee5c1
sha256: d332d831fec34137d376cd3cc09892dc0f8875a2d7192b743aeda96cab2735b4
sha512: 1af5be0abe18c7db9dfbc9dd15461ff2ad922d1d0bb27aa137b7517df783ce77de0e1e852106b5b3e085b0ad96b1fdd88c0aa67aa27f614ece0e7ad3aeea80b8
ssdeep: 12288:QXBQ3fMQyWV0rbDxyBWZh2TvtgHoiemIKI1ydX7wmqzq3wkgJ:KB/Qn0rbD8UZUDtgIiemI51Mwtewkm
type: PE32+ executable (DLL) (GUI) x86-64, for MS Windows


Version Info:

LegalCopyright: Copyright xa9 2018
MIMEType: application/x-java-applet|application/x-java-bean|application/x-java-vm|application/x-java-applet;version=1.1.1|application/x-java-bean;version=1.1.1|application/x-java-applet;version=1.1|application/x-java-bean;version=1.1|application/x-java-applet;version=1.2|application/x-java-bean;version=1.2|application/x-java-applet;version=1.1.3|application/x-java-bean;version=1.1.3|application/x-java-applet;version=1.1.2|application/x-java-bean;version=1.1.2|application/x-java-applet;version=1.3|application/x-java-bean;version=1.3|application/x-java-applet;version=1.2.2|application/x-java-bean;version=1.2.2|application/x-java-applet;version=1.2.1|application/x-java-bean;version=1.2.1|application/x-java-applet;version=1.3.1|application/x-java-bean;version=1.3.1|application/x-java-applet;version=1.4|application/x-java-bean;version=1.4|application/x-java-applet;version=1.4.1|application/x-java-bean;version=1.4.1|application/x-java-applet;version=1.4.2|application/x-java-bean;version=1.4.2|application/x-java-applet;version=1.5|application/x-java-bean;version=1.5|application/x-java-applet;version=1.6|application/x-java-bean;version=1.6|application/x-java-applet;version=1.7|application/x-java-bean;version=1.7|application/x-java-applet;version=1.8|application/x-java-bean;version=1.8|application/x-java-applet;jpi-version=1.8.0_171|application/x-java-bean;jpi-version=1.8.0_171|application/x-java-vm-npruntime|application/x-java-applet;deploy=11.171.2|application/x-java-applet;javafx=8.0.171
FileExtents: |
FileVersion: 93.598.6.58
Full Version: 93.598.6.58
FileOpenName: Java Applet|JavaBeans
InternalName: Hhan Odet-uh
ProductName: Hhan(OD) Nuhelhet EO 8 S171
CompanyName: Oracle Corporation
ProductVersion: 9.3.5986.58
FileDescription: Next Generation Java Plug-in 11.171.2 for Mozilla browsers
OriginalFilename: hhan2.dll
Translation: 0x0409 0x04e4

Win64/Kryptik.CMY also known as:

Elasticmalicious (high confidence)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
ESET-NOD32a variant of Win64/Kryptik.CMY
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastWin64:Malware-gen
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win64.Injexa.pef
SophosML/PE-A + Troj/Dridex-ABY
F-SecureTrojan.TR/Crypt.XPACK.Gen4
FireEyeGeneric.mg.67736c803c7c0897
SentinelOneStatic AI – Suspicious PE
AviraTR/Crypt.XPACK.Gen4
ZoneAlarmHEUR:Trojan.Win64.Injexa.pef
Acronissuspicious
IkarusTrojan.Win64.Dridex
AVGWin64:Malware-gen

How to remove Win64/Kryptik.CMY?

Win64/Kryptik.CMY removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Malware

Win64/Kryptik.CMY removal instruction

Malware Removal

The Win64/Kryptik.CMY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Win64/Kryptik.CMY virus can do?

  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Win64/Kryptik.CMY?



File Info:

crc32: 7D72BEAB
md5: d33bd917d5420e16157fa94bad66eed7
name: D33BD917D5420E16157FA94BAD66EED7.mlw
sha1: 13eec3f0cf1ce7f61c09f12143b0e235712447a5
sha256: 9d941be63812c1b2be63a0bd33a8d8a84842ff19220f626039f783c2ef2e747e
sha512: 0df4930ad7fd9bfc5155a9f36d0020fbfaf12e6508f61fb46170fe0631ebde354119e0a4172256fa28e33117de7761ff5fa8b7a36f90388c1cdbff0d78538d42
ssdeep: 12288:oXBQ3fMQyWV0rbDxyBWZh2TvtgHoiemIKI1ydX7wmqzq3wkgJ:iB/Qn0rbD8UZUDtgIiemI51Mwtewkm
type: PE32+ executable (DLL) (GUI) x86-64, for MS Windows


Version Info:

LegalCopyright: Copyright xa9 2018
MIMEType: application/x-java-applet|application/x-java-bean|application/x-java-vm|application/x-java-applet;version=1.1.1|application/x-java-bean;version=1.1.1|application/x-java-applet;version=1.1|application/x-java-bean;version=1.1|application/x-java-applet;version=1.2|application/x-java-bean;version=1.2|application/x-java-applet;version=1.1.3|application/x-java-bean;version=1.1.3|application/x-java-applet;version=1.1.2|application/x-java-bean;version=1.1.2|application/x-java-applet;version=1.3|application/x-java-bean;version=1.3|application/x-java-applet;version=1.2.2|application/x-java-bean;version=1.2.2|application/x-java-applet;version=1.2.1|application/x-java-bean;version=1.2.1|application/x-java-applet;version=1.3.1|application/x-java-bean;version=1.3.1|application/x-java-applet;version=1.4|application/x-java-bean;version=1.4|application/x-java-applet;version=1.4.1|application/x-java-bean;version=1.4.1|application/x-java-applet;version=1.4.2|application/x-java-bean;version=1.4.2|application/x-java-applet;version=1.5|application/x-java-bean;version=1.5|application/x-java-applet;version=1.6|application/x-java-bean;version=1.6|application/x-java-applet;version=1.7|application/x-java-bean;version=1.7|application/x-java-applet;version=1.8|application/x-java-bean;version=1.8|application/x-java-applet;jpi-version=1.8.0_171|application/x-java-bean;jpi-version=1.8.0_171|application/x-java-vm-npruntime|application/x-java-applet;deploy=11.171.2|application/x-java-applet;javafx=8.0.171
FileExtents: |
FileVersion: 93.598.6.58
Full Version: 93.598.6.58
FileOpenName: Java Applet|JavaBeans
InternalName: Hhan Odet-uh
ProductName: Hhan(OD) Nuhelhet EO 8 S171
CompanyName: Oracle Corporation
ProductVersion: 9.3.5986.58
FileDescription: Next Generation Java Plug-in 11.171.2 for Mozilla browsers
OriginalFilename: hhan2.dll
Translation: 0x0409 0x04e4

Win64/Kryptik.CMY also known as:

LionicTrojan.Win64.Injexa.4!c
Elasticmalicious (high confidence)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win64/Kryptik.4f61a61f
K7GWTrojan ( 0057eccc1 )
K7AntiVirusTrojan ( 0057eccc1 )
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win64/Kryptik.CMY
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastWin64:Malware-gen
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win64.Injexa.pef
BitDefenderTrojan.GenericKD.37237596
Ad-AwareTrojan.GenericKD.37237596
SophosMal/Generic-R + Troj/Dridex-ABY
McAfee-GW-EditionBehavesLike.Win64.Drixed.bc
FireEyeGeneric.mg.d33bd917d5420e16
EmsisoftTrojan.GenericKD.37237596 (B)
SentinelOneStatic AI – Suspicious PE
AviraTR/Crypt.XPACK.Gen4
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Ditertag.A
ZoneAlarmHEUR:Trojan.Win64.Injexa.pef
GDataWin32.Trojan-Spy.Dridex.19ZMIO
AhnLab-V3Trojan/Win.Dridex.R431573
Acronissuspicious
McAfeeRDN/Generic.dx
TrendMicro-HouseCallTROJ_GEN.R002H0CGE21
IkarusTrojan.Win64.Dridex
FortinetW64/Injexa.PEF!tr
AVGWin64:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win64/Trojan.Injexa.HggASYYA

How to remove Win64/Kryptik.CMY?

Win64/Kryptik.CMY removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment