Malware

How to remove “Win32/Kryptik.HNJK”?

Malware Removal

The Win32/Kryptik.HNJK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HNJK virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Kryptik.HNJK?


File Info:

crc32: A46E98A1
md5: dd6d2fa2aa6e33bdb4be70a7c6310fb1
name: DD6D2FA2AA6E33BDB4BE70A7C6310FB1.mlw
sha1: 7a258dadd2a6eb64f00f4eb5c8776b7c54bd5be1
sha256: 0db410f0c2289821ba32d8f3fe4c4154b5fbeb3b4e5852c6a95c9176f09a2d78
sha512: 29dde79198ff68e8caffb5adf7442c3389b6333f6ece074a0fbb320413f387e98b82566a596a6d7e5e45452cb6e80c9bbdd8f06418504c47d026c1f225a8cf89
ssdeep: 12288:+AriSOG9c0jc5mDQxqfZR4iTQG8Ht3WZ6y1zTV3z1:vof4DQxMT4iTFUVWXpTVj
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: Wfzaacjtrg.dll
FileVersion: 5.8.9.7
ProductName: Wfzaacjtrg
ProductVersion: 5.8.9.7
FileDescription: asdzxcqwe123
OriginalFilename: Wfzaacjtrg.dll
Translation: 0x0408 0x04e4

Win32/Kryptik.HNJK also known as:

Elasticmalicious (high confidence)
ALYacGen:Variant.Fragtor.42608
K7GWTrojan ( 0058a9fa1 )
K7AntiVirusTrojan ( 0058a9fa1 )
CyrenW32/Emotet.EDM.gen!Eldorado
ESET-NOD32a variant of Win32/Kryptik.HNJK
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
KasperskyVHO:Trojan.Win32.Sdum.gen
BitDefenderGen:Variant.Zusy.407650
MicroWorld-eScanGen:Variant.Zusy.407650
Ad-AwareGen:Variant.Zusy.407650
FireEyeGen:Variant.Zusy.407650
EmsisoftGen:Variant.Zusy.407650 (B)
eGambitUnsafe.AI_Score_90%
MicrosoftTrojan:Win32/Emotetcrypt.SMS!MTB
GDataGen:Variant.Zusy.407650
AhnLab-V3Trojan/Win.EmotetCrypt.R451476
McAfeeEmotet-FSQ!DD6D2FA2AA6E
MAXmalware (ai score=86)
MalwarebytesTrojan.Emotet
PandaTrj/GdSda.A
FortinetW32/Emote.CQ!tr
AVGWin32:MalwareX-gen [Trj]

How to remove Win32/Kryptik.HNJK?

Win32/Kryptik.HNJK removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment