Categories: Malware

Win64/Kryptik.CMY removal tips

The Win64/Kryptik.CMY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win64/Kryptik.CMY virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Win64/Kryptik.CMY?


File Info:
crc32: 3715F36Dmd5: 67736c803c7c0897a744ed61a8c38439name: 67736C803C7C0897A744ED61A8C38439.mlwsha1: 5a5cedb014a794865cc8cb39ee88e28aaffee5c1sha256: d332d831fec34137d376cd3cc09892dc0f8875a2d7192b743aeda96cab2735b4sha512: 1af5be0abe18c7db9dfbc9dd15461ff2ad922d1d0bb27aa137b7517df783ce77de0e1e852106b5b3e085b0ad96b1fdd88c0aa67aa27f614ece0e7ad3aeea80b8ssdeep: 12288:QXBQ3fMQyWV0rbDxyBWZh2TvtgHoiemIKI1ydX7wmqzq3wkgJ:KB/Qn0rbD8UZUDtgIiemI51Mwtewkmtype: PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Version Info:
LegalCopyright: Copyright xa9 2018MIMEType: application/x-java-applet|application/x-java-bean|application/x-java-vm|application/x-java-applet;version=1.1.1|application/x-java-bean;version=1.1.1|application/x-java-applet;version=1.1|application/x-java-bean;version=1.1|application/x-java-applet;version=1.2|application/x-java-bean;version=1.2|application/x-java-applet;version=1.1.3|application/x-java-bean;version=1.1.3|application/x-java-applet;version=1.1.2|application/x-java-bean;version=1.1.2|application/x-java-applet;version=1.3|application/x-java-bean;version=1.3|application/x-java-applet;version=1.2.2|application/x-java-bean;version=1.2.2|application/x-java-applet;version=1.2.1|application/x-java-bean;version=1.2.1|application/x-java-applet;version=1.3.1|application/x-java-bean;version=1.3.1|application/x-java-applet;version=1.4|application/x-java-bean;version=1.4|application/x-java-applet;version=1.4.1|application/x-java-bean;version=1.4.1|application/x-java-applet;version=1.4.2|application/x-java-bean;version=1.4.2|application/x-java-applet;version=1.5|application/x-java-bean;version=1.5|application/x-java-applet;version=1.6|application/x-java-bean;version=1.6|application/x-java-applet;version=1.7|application/x-java-bean;version=1.7|application/x-java-applet;version=1.8|application/x-java-bean;version=1.8|application/x-java-applet;jpi-version=1.8.0_171|application/x-java-bean;jpi-version=1.8.0_171|application/x-java-vm-npruntime|application/x-java-applet;deploy=11.171.2|application/x-java-applet;javafx=8.0.171FileExtents: |FileVersion: 93.598.6.58Full Version: 93.598.6.58FileOpenName: Java Applet|JavaBeansInternalName: Hhan Odet-uhProductName: Hhan(OD) Nuhelhet EO 8 S171CompanyName: Oracle CorporationProductVersion: 9.3.5986.58FileDescription: Next Generation Java Plug-in 11.171.2 for Mozilla browsersOriginalFilename: hhan2.dllTranslation: 0x0409 0x04e4

Win64/Kryptik.CMY also known as:

Elastic	malicious (high confidence)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
ESET-NOD32	a variant of Win64/Kryptik.CMY
Zoner	Probably Heur.ExeHeaderH
APEX	Malicious
Avast	Win64:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win64.Injexa.pef
Sophos	ML/PE-A + Troj/Dridex-ABY
F-Secure	Trojan.TR/Crypt.XPACK.Gen4
FireEye	Generic.mg.67736c803c7c0897
SentinelOne	Static AI – Suspicious PE
Avira	TR/Crypt.XPACK.Gen4
ZoneAlarm	HEUR:Trojan.Win64.Injexa.pef
Acronis	suspicious
Ikarus	Trojan.Win64.Dridex
AVG	Win64:Malware-gen