Categories: Trojan

Trojan-Dropper.Win32.Injector.tyuj removal instruction

The Trojan-Dropper.Win32.Injector.tyuj is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Dropper.Win32.Injector.tyuj virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
Yara rule detections observed from a process memory dump/dropped files/CAPE
Guard pages use detected – possible anti-debugging.
Dynamic (imported) function loading detected
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Disables host Context Menu in Taskbar and Start
Uses suspicious command line tools or Windows utilities

How to determine Trojan-Dropper.Win32.Injector.tyuj?


File Info:
name: 55A04B7C16E9DA5F8541.mlwpath: /opt/CAPEv2/storage/binaries/02ecbd7166052c588c7c85e3de8373ae0f50990a53021f8bb756906f8751c959crc32: E74F58FCmd5: 55a04b7c16e9da5f8541fb3138777710sha1: 6d462734d08cca4c47b060ce936eb75ea16824b1sha256: 02ecbd7166052c588c7c85e3de8373ae0f50990a53021f8bb756906f8751c959sha512: 3de7c90efe2eb11097db14a6d522b72cd2d4e7073a549b5c4a0bc137d7591b304c986dcda924e1a2e65649a7ad62977cd4b068f7501edeccc76d83c5e58ad26essdeep: 98304:HrioGV8MvSUJZTRhXhH1J2rV0Z5Ov1Of4znc0i5M7Jk6/iuz3ElpQtL/a5LZnXZY:LiDhBJECOv1OwVuB6ncQtL/MVVTuYPfMtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1EB36335B0493B4E9F691BC38570EF8C2674639271DA239710D47C6EA8A336C2FBD6217sha3_384: 159742fb4bc41edb24d5cf338022e157dc9c9a138226c95ff07d45728a4332ab5e89f67aecf3ae0d59c073d0cfb63a61ep_bytes: 60be00d04b008dbe0040f4ff57eb0b90timestamp: 2021-08-16 09:01:12
Version Info:
FileVersion: 2.0.1.398Comments: 更新浏览器配置文件FileDescription: Eclipse PortableProductVersion: 0.0.0.0Translation: 0x0804 0x04b0

Trojan-Dropper.Win32.Injector.tyuj also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.47629744
FireEye	Generic.mg.55a04b7c16e9da5f
McAfee	Artemis!55A04B7C16E9
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	TrojanDropper:Win32/Diztakun.5c9b18f0
Cybereason	malicious.4d08cc
Cyren	W32/Trojan.PIAE-4273
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.Generic-6651422-0
Kaspersky	Trojan-Dropper.Win32.Injector.tyuj
BitDefender	Trojan.GenericKD.47629744
Avast	Win32:Malware-gen
Rising	Malware.Heuristic!ET#98% (RDMK:cmRtazrRb+HGvoiiKGK2bjOCr6fS)
Ad-Aware	Trojan.GenericKD.47629744
Sophos	Generic ML PUA (PUA)
DrWeb	Trojan.DownLoader9.710
McAfee-GW-Edition	BehavesLike.Win32.Generic.rc
Emsisoft	Trojan.GenericKD.47629744 (B)
GData	Trojan.GenericKD.47629744
Jiangmin	Trojan.Script.aixe
MaxSecure	Trojan.Malware.300983.susgen
Avira	TR/Drop.Injector.egvkf
Kingsoft	Win32.Heur.KVM007.a.(kcloud)
Gridinsoft	Ransom.Win32.Wacatac.sa
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Evo-gen.C4597684
ALYac	Trojan.GenericKD.47629744
MAX	malware (ai score=83)
Tencent	Win32.Trojan-dropper.Injector.Swku
Ikarus	Trojan.Dropper.Injector
eGambit	Unsafe.AI_Score_100%
Fortinet	Malicious_Behavior.SB
AVG	Win32:Malware-gen