Should I remove “Trojan.Win32.Inject.aijsx”?

The Trojan.Win32.Inject.aijsx is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Inject.aijsx virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan.Win32.Inject.aijsx?


File Info:
name: C9149D59C6E01962EF91.mlw
path: /opt/CAPEv2/storage/binaries/6e4bfc5768dbc261a7ad8d3af0e2dfe2d42087567799fe16591b00183b16d70a
crc32: 35D78F5F
md5: c9149d59c6e01962ef91c29ecb56c631
sha1: 4eb04008ba882e8155f1bee4c9b17884c1b5ec37
sha256: 6e4bfc5768dbc261a7ad8d3af0e2dfe2d42087567799fe16591b00183b16d70a
sha512: af66b70a24d19cf8ec11b313f046f2c448582132d3dc81026924f8dbe679f49104ea94ced299b2614689d6aaf0491ca06a168a3f8c6bad8dbb7994a3af60c83b
ssdeep: 1536:J3ZZ5JILcveIEV6OZeJVk3z3DpVPcbYuF5FaO:J3ZreLGezXiVkDTnIdz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19A339E116B9AA175F0F21D3471FDB235853AFE331C09DB4FA654D18E2A38916AA3073B
sha3_384: de8a44acc2119369604dcacf02d002c3f8e8fb9ff691230b517f747dac67b61083543556dec06c807a942baaa068e694
ep_bytes: e82bffffff6a5868082d0001e8cdfeff
timestamp: 2008-12-07 04:12:59

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Userinit Logon Application
FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
InternalName: userinit
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: USERINIT.EXE
ProductName: Microsoft® Windows® Operating System
ProductVersion: 6.1.7601.17514
Translation: 0x0409 0x04b0

Trojan.Win32.Inject.aijsx also known as:

Bkav	W32.AIDetect.malware1
tehtris	Generic.Malware
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.8ba882
Cyren	W32/S-7e8067f7!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Kaspersky	Trojan.Win32.Inject.aijsx
NANO-Antivirus	Virus.Win32.Virut-Gen.bwpxnc
Avast	FileRepMalware [Misc]
McAfee-GW-Edition	BehavesLike.Win32.Virut.qc
FireEye	Generic.mg.c9149d59c6e01962
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Avira	TR/Patched.Gen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	Artemis!C9149D59C6E0
Rising	Trojan.Inject!8.103 (RDMK:cmRtazqLq37YSxNqxITkeaB6ruzu)
Ikarus	Virus.Win32.Virut
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic.AC.2E7!tr
BitDefenderTheta	Gen:NN.ZexaF.34638.dq0@aGZnGxii
AVG	FileRepMalware [Misc]
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Trojan.Win32.Inject.aijsx?

Trojan.Win32.Inject.aijsx removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X