Malware

Should I remove “Win32/Kryptik.HNDQ”?

Malware Removal

The Win32/Kryptik.HNDQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HNDQ virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Kannada
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

telegalive.top
toptelete.top

How to determine Win32/Kryptik.HNDQ?


File Info:

crc32: EDC4B1CF
md5: 6c4b753d84dba0ae65d706e6db8c44b6
name: 6C4B753D84DBA0AE65D706E6DB8C44B6.mlw
sha1: 5d39df4fb0495965ca30d30f225a69a0bd864eb9
sha256: c88305b73a116666441656672ed3684e11d5fb4b8bf9b3de0595ae9a507071c7
sha512: d95f6e3013ba7dcff709ca5b6140c100ef756b76052862515e3c6d7d440cfcba2e0054e0aa5adfbf2797b47a2563c6f46ebd6d336a8498eabcb4aee96d9be13a
ssdeep: 12288:kGndaddiMKA0j758hY03F9M4T69JYLIC:udiMKA0v2fLM4T6/AIC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: bomgpiaruci.iwa
ProductVersion: 15.54.32.51
Copyright: Copyrighz (C) 2021, fudkagat
Translation: 0x0195 0x0456

Win32/Kryptik.HNDQ also known as:

BkavW32.AIDetect.malware1
K7AntiVirusRiskware ( 0040eff71 )
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Spy.21580
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.47301877
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaRansom:Win32/StopCrypt.bd653693
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.fb0495
CyrenW32/Kryptik.FOQ.gen!Eldorado
SymantecPacked.Generic.528
ESET-NOD32a variant of Win32/Kryptik.HNDQ
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
KasperskyHEUR:Exploit.Win32.Shellcode.gen
BitDefenderTrojan.GenericKD.47301877
MicroWorld-eScanTrojan.GenericKD.47301877
Ad-AwareTrojan.GenericKD.47301877
SophosMal/Generic-S + Troj/Krypt-BO
BitDefenderThetaGen:NN.ZexaF.34236.Au0@a8WwX7eG
McAfee-GW-EditionBehavesLike.Win32.Lockbit.gc
FireEyeGeneric.mg.6c4b753d84dba0ae
EmsisoftTrojan.Crypt (A)
SentinelOneStatic AI – Malicious PE
WebrootW32.Trojan.Gen
AviraTR/AD.StellarStealer.qngam
eGambitUnsafe.AI_Score_99%
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftRansom:Win32/StopCrypt.MAQK!MTB
GDataTrojan.GenericKD.47301877
AhnLab-V3Infostealer/Win.SmokeLoader.R448219
Acronissuspicious
McAfeeGenericRXQO-MO!6C4B753D84DB
MAXmalware (ai score=81)
VBA32Malware-Cryptor.2LA.gen
MalwarebytesTrojan.MalPack
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.DA22 (CLASSIC)
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetPossibleThreat.PALLAS.H
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Win32/Kryptik.HNDQ?

Win32/Kryptik.HNDQ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment