Win32/Kryptik.HNSN removal instruction

The Win32/Kryptik.HNSN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.HNSN virus can do?

Unconventionial language used in binary resources: Spanish (Colombia)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/Kryptik.HNSN?


File Info:
name: 0007B6DA58BB0D641682.mlw
path: /opt/CAPEv2/storage/binaries/67209a16d96e5a485aba9539237b4de80919f6bb22ef713b9857ef23b91691b0
crc32: 23A4A68A
md5: 0007b6da58bb0d6416822cae0acddbd9
sha1: 734f10dde831e3919a126008737e92ee601f1e43
sha256: 67209a16d96e5a485aba9539237b4de80919f6bb22ef713b9857ef23b91691b0
sha512: c07b8ec60f9e156bbe48d42ad92741ce85b00b5eac3ec4fe115882eee4179e3d9009b4f1ba6ca3e5f609c000cee154485a7a6d863b2cca9b8bd1cd2d637fe1d8
ssdeep: 24576:q4Axn+TZV+2ddddddddddddddddddddddddddddddddddddddddddddddddddddX:G4N
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T136B66CA316350E07D1B0923E327C7F1ADDDFEAF6D31644AD41A499E558032B24CFA92B
sha3_384: e045e6a9d95ec3c5594f4b39e57b68398332443026f4f7b407604af9bb494072948b4faf6403f4b9f793100fe2412435
ep_bytes: 8bff558bece8767c0000e8110000005d
timestamp: 2021-01-20 16:24:22

Version Info:
0: [No Data]

Win32/Kryptik.HNSN also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.Rootkit.22046
MicroWorld-eScan	Trojan.Agent.FQWT
FireEye	Generic.mg.0007b6da58bb0d64
ALYac	Trojan.Agent.FQWT
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0058bf631 )
K7GW	Trojan ( 0058bf631 )
CrowdStrike	win/malicious_confidence_90% (D)
Cyren	W32/Kryptik.FSC.gen!Eldorado
ESET-NOD32	a variant of Win32/Kryptik.HNSN
ClamAV	Win.Dropper.Tofsee-9916201-0
BitDefender	Trojan.Agent.FQWT
Ad-Aware	Trojan.Agent.FQWT
Sophos	ML/PE-A
Baidu	Win32.Trojan.Kryptik.jm
Zillya	Trojan.Kryptik.Win32.3654024
McAfee-GW-Edition	BehavesLike.Win32.Worm.vt
Emsisoft	Trojan.Crypt (A)
Ikarus	Trojan.Win32
GData	Win32.Trojan.BSE.1R8QSDA
Jiangmin	Backdoor.Mokes.exb
Antiy-AVL	Trojan/Generic.ASMalwS.34F52CA
Microsoft	Trojan:Win32/Azorult.RM!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Infostealer/Win.Raccoon.R459259
Acronis	suspicious
McAfee	Packed-GEE!0007B6DA58BB
MAX	malware (ai score=82)
VBA32	BScope.Trojan.Sabsik.FL
Malwarebytes	Trojan.MalPack.GS
APEX	Malicious
Rising	Malware.Heuristic!ET#77% (RDMK:cmRtazpyW++sRwj43tDyihDslCF1)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Kryptik.HNSW!tr
Cybereason	malicious.de831e
Panda	Trj/GdSda.A

How to remove Win32/Kryptik.HNSN?

Win32/Kryptik.HNSN removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X