Malware

Win32.HLLW.Klez.e removal

Malware Removal

The Win32.HLLW.Klez.e is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32.HLLW.Klez.e virus can do?

  • Sample contains Overlay data
  • Authenticode signature is invalid

How to determine Win32.HLLW.Klez.e?


File Info:

name: 592003DD30D64A37C265.mlw
path: /opt/CAPEv2/storage/binaries/c17dd7cbc3a051203ea6a1aab01ac4b2e0d1cd11eb74afec83833d6a8120cafd
crc32: 5F1DD2A2
md5: 592003dd30d64a37c265adb29a825307
sha1: cae1f70f08648145b06ee1cc45937eac2e37ee4c
sha256: c17dd7cbc3a051203ea6a1aab01ac4b2e0d1cd11eb74afec83833d6a8120cafd
sha512: a677bd1971673830a3fd3943cdfcd936bc92ab2de9ee7e2e8b9115c80b9df91835dc02398b2c91c461999efa3eb214cc558eab28eae614d487f89f9ee380d41f
ssdeep: 1536:TSSnze1gsJ55n/4CkOwwF+bho9l8aTYnj:+Sn3sziCkd5bho9lIn
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FF838D26B9D04433E8B6827015BE4792BAFFE8310636EE83D7156A5B3D20AD0DD3574B
sha3_384: 3bc96742a595c34c5a7095679da4bf9dd40447ef4e5605acc2ddd269d9b27a762fb5fd56277418188b1f74d291477123
ep_bytes: 558bec6aff6838d240006824a8400064
timestamp: 2002-01-14 08:44:12

Version Info:

0: [No Data]

Win32.HLLW.Klez.e also known as:

BkavW32.KlezE.Worm
MicroWorld-eScanWin32.Klez.E@mm
FireEyeGeneric.mg.592003dd30d64a37
CAT-QuickHealW32.Klez.H
MalwarebytesGeneric.Malware.AI.DDS
ZillyaWorm.Klez.Win32.2
K7AntiVirusEmailWorm ( 000805561 )
K7GWEmailWorm ( 000805561 )
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderThetaGen:NN.ZexaF.36802.eqX@ayzzNh
SymantecW32.Klez.E@mm
Elasticmalicious (high confidence)
ESET-NOD32Win32/Klez.E
ZonerWorm.Win32.Klez.24278
APEXMalicious
CynetMalicious (score: 100)
KasperskyEmail-Worm.Win32.Klez.k
BitDefenderWin32.Klez.E@mm
NANO-AntivirusTrojan.Win32.Klez.gleq
SUPERAntiSpywareWorm.Klez
RisingWorm.Klez!1.A1CB (CLASSIC)
F-SecureWorm.WORM/Klez.E
DrWebWin32.HLLM.Klez.1
VIPREWin32.Klez.E@mm
TrendMicroWORM_KLEZ.GEN
Trapminemalicious.high.ml.score
SophosW32/Klez-E
SentinelOneStatic AI – Malicious PE
JiangminWorm/Klez.l
AviraWORM/Klez.E
MAXmalware (ai score=85)
Antiy-AVLWorm[Email]/Win32.Klez.k
Kingsoftmalware.kb.a.1000
ArcabitWin32.Klez.EA8AF7
ViRobotI-Worm.Win32.Klez-gen
ZoneAlarmEmail-Worm.Win32.Klez.k
GDataWin32.Trojan.PSE.15IDC91
GoogleDetected
AhnLab-V3Win32/Klez.worm.E
Acronissuspicious
VBA32Win32.HLLW.Klez.e
TACHYONWorm/W32.Klez.81919
DeepInstinctMALICIOUS
Cylanceunsafe
TrendMicro-HouseCallWORM_KLEZ.GEN
TencentEmail-Worm.Win32.Klez.ha
YandexI-Worm.Klez!CIO9ffjdhqs
IkarusEmail-Worm.Win32.Klez.E
Cybereasonmalicious.d30d64
PandaW32/Klez.F
alibabacloudBackdoor:Win/Agent.A(dyn)

How to remove Win32.HLLW.Klez.e?

Win32.HLLW.Klez.e removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment