Malware

Should I remove “Win32/KillDisk.NCD”?

Malware Removal

The Win32/KillDisk.NCD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/KillDisk.NCD virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/KillDisk.NCD?


File Info:

crc32: D6A271C2
md5: 86e98aea46b5d7efe4985de710e50079
name: 86E98AEA46B5D7EFE4985DE710E50079.mlw
sha1: 1226b75f21a693676cabff780d4f50f17f8b2b63
sha256: e5143c0f826b1e3cdb51c2ddd202b7ecf30630028f4cd0810fe9909452095f1c
sha512: f8053ba24b471414a66a3eb18209a45cdddf3b891d2c7af85e59245bddf711ee351acbbf34f0170bc182eeac5828fa2422affe7193e52b56b5cc2fda37318b39
ssdeep: 192:yH+g10cUkxWUuEKb6ZN44P2T4o/dJXwU0kom90k8n7ZZAMA86fK7UPC:e+gXWUAO2TxXg3kom+k87zxF74C
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Win32/KillDisk.NCD also known as:

K7AntiVirusTrojan ( 0057d6891 )
CynetMalicious (score: 99)
ALYacTrojan.GenericKD.46599106
AlibabaTrojan:Win32/KillDisk.8cce0801
K7GWTrojan ( 0057d6891 )
ESET-NOD32a variant of Win32/KillDisk.NCD
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan.Win32.DiskWriter.gen
BitDefenderTrojan.GenericKD.46599106
MicroWorld-eScanTrojan.GenericKD.46599106
Ad-AwareTrojan.GenericKD.46599106
FireEyeTrojan.GenericKD.46599106
SophosMal/Generic-S
AviraTR/KillDisk.ymgcn
ArcabitTrojan.Generic.D2C70BC2
ZoneAlarmHEUR:Trojan.Win32.DiskWriter.gen
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeArtemis!86E98AEA46B5
MAXmalware (ai score=85)
VBA32BScope.Trojan.DiskWriter
PandaTrj/GdSda.A
IkarusTrojan.Win32.KillDisk
FortinetW32/KillDisk.NCD!tr
AVGWin32:Trojan-gen
Qihoo-360Win32/Ransom.DiskWriter.HgIASYEA

How to remove Win32/KillDisk.NCD?

Win32/KillDisk.NCD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment