How to remove “Win32/Kryptik.HNDW”?

The Win32/Kryptik.HNDW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.HNDW virus can do?

Unconventionial language used in binary resources: Kannada
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Win32/Kryptik.HNDW?


File Info:
crc32: E8A89178
md5: c1a0009bf9e7701b274555a49cb8b363
name: C1A0009BF9E7701B274555A49CB8B363.mlw
sha1: 39eb5b3b35cffa453b27324976a0f4594b60fc47
sha256: 63143f3047ef505fea0513d92b9a0fe1abbf640baf0eadd619926299ab05c0f1
sha512: 5a805f30d01aaddf10bf0115707e2626ff7ac45d256fd364d91431d43ce9f04bb84453d17fbe17d6613671c7edc0ec6c2772003c5fb35c94818b28945ea66700
ssdeep: 12288:plaLrl6u1rCnj1JbVhBVo4RApskUfv9XccL90ZKWLeKYQTr+fQJoB1VOCCdO:G3lFrCj1JbpRA1Un9XccL9b+pT4lO7d
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
InternalName: bomgpiaruci.iwa
ProductVersion: 15.54.32.51
Copyright: Copyrighz (C) 2021, fudkagat
Translation: 0x0115 0x046a

Win32/Kryptik.HNDW also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Malwarebytes	Trojan.MalPack.GS
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Gen:Variant.Fragtor.37347
K7GW	Hacktool ( 700007861 )
Cybereason	malicious.b35cff
Cyren	W32/Kryptik.FOQ.gen!Eldorado
Symantec	Packed.Generic.528
ESET-NOD32	a variant of Win32/Kryptik.HNDW
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan-Ransom.Win32.Stop.gen
MicroWorld-eScan	Gen:Variant.Fragtor.37347
Ad-Aware	Gen:Variant.Fragtor.37347
Sophos	ML/PE-A + Troj/Krypt-BO
BitDefenderTheta	Gen:NN.ZexaF.34236.Ru0@aW4lv@aG
McAfee-GW-Edition	BehavesLike.Win32.Drixed.bc
FireEye	Generic.mg.c1a0009bf9e7701b
Emsisoft	Gen:Variant.Fragtor.37347 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Fragtor.37347
Acronis	suspicious
McAfee	Artemis!C1A0009BF9E7
MAX	malware (ai score=89)
VBA32	Malware-Cryptor.2LA.gen
Rising	Malware.Heuristic!ET#95% (RDMK:cmRtazp/t4LxYU5Sg3gPMg8AdknJ)
Ikarus	Trojan.Win32.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/GenKryptik.FMYB!tr

How to remove Win32/Kryptik.HNDW?

Win32/Kryptik.HNDW removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X