Mal/Inject-GG removal

The Mal/Inject-GG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Inject-GG virus can do?

CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Mal/Inject-GG?


File Info:
name: C70CCA61B9AD2125AC20.mlw
path: /opt/CAPEv2/storage/binaries/2964a2387cb6eb5869ee0b27089b48766c9dbbf204869d2f87aff260cc92517f
crc32: 231521AF
md5: c70cca61b9ad2125ac2054bc8a5a7858
sha1: cb171e37d317c46fda4c71e41b90ffca1702cea1
sha256: 2964a2387cb6eb5869ee0b27089b48766c9dbbf204869d2f87aff260cc92517f
sha512: ea82e6ad822048e091a9080a5150557b983f9b2a98dcd2ea701c1d16dbd9dc778528ba1138240064eab25278d9051e1922cd9b126142e0cf00707c1e80799fa0
ssdeep: 6144:Qat5ENYLjm2Z22b1agCn+XkP7iUGjpfMlEGOKxg:Qg+NYLr72Pqp5G5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1256439123E444765D76D1A34CCD7152033F2C9B38BB3E7492F94E5AD0943262BA7E2AE
sha3_384: f505876216ae3b5d9d3db9ab4ce1021d04abca54a9e7aaf27377bc8519361e3a7e6469145a4a2ba5ac1e1ab42dac0567
ep_bytes: ff250020400000000000000000000000
timestamp: 2019-12-26 08:42:36

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: برمجة وإعداد شركة ابداع سوفت للأنظمة الخاصة
FileDescription: حزمــــي تحويـــــل
FileVersion: 6.0.1.0
InternalName: ExchangerAgentClient.exe
LegalCopyright: الحقوق محفوظة © شركة ابداع سوفت للأنظمة الخاصة
LegalTrademarks: 
OriginalFilename: ExchangerAgentClient.exe
ProductName: حزمي تحويل
ProductVersion: 6.0.1.0
Assembly Version: 6.0.1.0

Mal/Inject-GG also known as:

Bkav	W32.Common.5E8DA1CA
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.V7zf
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
APEX	Malicious
Sophos	Mal/Inject-GG
McAfee-GW-Edition	GenericRXEP-II!C70CCA61B9AD
SentinelOne	Static AI – Suspicious PE
Google	Detected
Antiy-AVL	Trojan/Win32.Inject
AhnLab-V3	Malware/Win32.RL_Generic.C4266789
McAfee	GenericRXEP-II!C70CCA61B9AD
TrendMicro-HouseCall	TROJ_GEN.R002H06E923
Fortinet	W32/Inject.GG!tr
BitDefenderTheta	Gen:NN.ZemsilF.36302.uq0@a8oX7jj
DeepInstinct	MALICIOUS

How to remove Mal/Inject-GG?

Mal/Inject-GG removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X