Trojan

What is “Trojan.Win32.Inject.adroi”?

Malware Removal

The Trojan.Win32.Inject.adroi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Inject.adroi virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan.Win32.Inject.adroi?


File Info:

crc32: 66912F09
md5: 1e94db93fc82b65bb42731da5103f81b
name: 1E94DB93FC82B65BB42731DA5103F81B.mlw
sha1: 53063a9ba2e502be2c8ed15abcb3376ed3aa7ded
sha256: ddaedc7bb15e88a7461ac327a1fd883e654b815847a8620f29d9c49f3a1be2a0
sha512: 0cc041d5f746a2e3c692ba4f96b0feecea406a05c922379d2946295a01cd88beba1a0286c238fca01c7027eba429f33565a36ec9c31a373def5daf2bcb775d74
ssdeep: 3072:KpPX3upd1qnAEzYds7E7/dThEgjJtw0i5u4Du:6X+pd1bEz2s7ETRhEgjJi0Z4
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: ielowutil.exe
FileVersion: 8.00.7600.16385 (win7_rtm.090713-1255)
CompanyName: Microsoft Corporation
ProductName: Windowsxae Internet Explorer
OleSelfRegister:
ProductVersion: 8.00.7600.16385
FileDescription: Internet Low-Mic Utility Tool
OriginalFilename: ielowutil.exe
Translation: 0x0409 0x04b0

Trojan.Win32.Inject.adroi also known as:

BkavW32.AIDetectVM.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanWin32.Virtob.Gen.12.Dam
FireEyeGeneric.mg.1e94db93fc82b65b
CAT-QuickHealW32.Virut.G
McAfeeArtemis!1E94DB93FC82
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
BitDefenderWin32.Virtob.Gen.12.Dam
Cybereasonmalicious.3fc82b
BitDefenderThetaAI:FileInfector.C2A5779617
CyrenW32/Virut.D.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Vitro [Inf]
KasperskyTrojan.Win32.Inject.adroi
NANO-AntivirusVirus.Win32.Virut-Gen.bwpxnc
TencentWin32.Trojan.Inject.Ebrg
Ad-AwareWin32.Virtob.Gen.12.Dam
EmsisoftWin32.Virtob.Gen.12.Dam (B)
ComodoMalware@#262st5cz8f1gm
F-SecureTrojan.TR/Patched.Gen
McAfee-GW-EditionBehavesLike.Win32.Virut.cc
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE – File Infector
AviraTR/Patched.Gen
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitWin32.Virtob.Gen.12.Dam
ZoneAlarmTrojan.Win32.Inject.adroi
GDataWin32.Virtob.Gen.12.Dam
CynetMalicious (score: 100)
Acronissuspicious
MAXmalware (ai score=85)
MalwarebytesMalware.Heuristic.1001
PandaTrj/CI.A
RisingMalware.Heuristic!ET#100% (RDMK:cmRtazqrsdrXzVSwQl+R+8HzocPf)
IkarusTrojan.Patched
FortinetW32/Virut.CE
AVGWin32:Vitro [Inf]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/Trojan.269

How to remove Trojan.Win32.Inject.adroi?

Trojan.Win32.Inject.adroi removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment