How to remove “Win32/Kryptik.HJWW”?

The Win32/Kryptik.HJWW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.HJWW virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Win32/Kryptik.HJWW?


File Info:
crc32: 25FA8288
md5: 8e3d3f90cb572121809d2945db6b02e6
name: 8E3D3F90CB572121809D2945DB6B02E6.mlw
sha1: eed38d4828f35c0d28bd4ff26031084899dfd333
sha256: edb5656c0d629d11678ee35d6f0b38b3497cd80d00ecd21b2059305dea8052e5
sha512: dd479a973c8ae5d163134e3217b6083a69eaee2eb321672ba4fc01724781771ed709441b6fa5eebf838823c736f87aa740880130ebb8db20ef76aecbcab94dca
ssdeep: 6144:JRJhqLIHeLLWGf6dQoyHQXkmGveSOgiijfpEF25PjX0m7:LJhMmeLL5cQogQXkzGSOgi8jEm
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Engineering 2021
InternalName: Engenharia de Requisitos.dll
FileVersion: 2.0.0.3
ProductName: Der Wahlvorstand
ProductVersion: 2.0.0.3
FileDescription: Papelaria e Escritxf3rio
OriginalFilename: Engenharia de Requisitos.dll
Translation: 0x0409 0x04b0

Win32/Kryptik.HJWW also known as:

McAfee	Artemis!8E3D3F90CB57
AegisLab	Trojan.Multi.Generic.4!c
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
BitDefender	Trojan.GenericKD.45876819
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Arcabit	Trojan.Generic.D2BC0653
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 85)
Kaspersky	HEUR:Trojan.Win32.Trickpak.gen
MicroWorld-eScan	Trojan.GenericKD.45876819
Rising	Trojan.Trickpak!8.122C7 (CLOUD)
Ad-Aware	Trojan.GenericKD.45876819
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/AD.TrickBot.cxjfu
McAfee-GW-Edition	BehavesLike.Win32.Emotet.dc
FireEye	Generic.mg.8e3d3f90cb572121
Emsisoft	Trojan.GenericKD.45876819 (B)
Avira	TR/AD.TrickBot.cxjfu
MAX	malware (ai score=88)
Microsoft	Trojan:Win32/Ymacco.AAED
ZoneAlarm	HEUR:Trojan.Win32.Trickpak.gen
GData	Win32.Trojan-Spy.TrickBot.P57T87
ESET-NOD32	a variant of Win32/Kryptik.HJWW
Cylance	Unsafe
Fortinet	W32/PossibleThreat
BitDefenderTheta	Gen:NN.ZedlaF.34608.sq8@aiPd3abk
AVG	FileRepMalware
Avast	FileRepMalware
Qihoo-360	Win32/TrojanPSW.TrickBot.HgkASQgA

How to remove Win32/Kryptik.HJWW?

Win32/Kryptik.HJWW removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X