Trojan

What is “Trojan.Win32.Inject.amoie”?

Malware Removal

The Trojan.Win32.Inject.amoie is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Inject.amoie virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Performs some HTTP requests
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz
redirector.gvt1.com

How to determine Trojan.Win32.Inject.amoie?


File Info:

crc32: 667EB92B
md5: 5d967f83e0c981fccc0a0dc725c13e17
name: zel777.exe
sha1: 7e1a3b770c6abcff322ba27f975559f71e97ff3c
sha256: 8bf9564b2c01286e373eaa576d0cceb44b3e7adec958ceb8ba7b7115fa2f0586
sha512: eb68556a805b584dc385a4cb1941198085bf391a011bfcc54ca40b2388e0e10e77b8fa02b418145a9eecf385187fd34ff0f93e72ebd0c4ce0e8f9a67013b642d
ssdeep: 12288:AYcWjXkAglfMCGqnjChEvv+t9BjGfIDD0A/s7fYWjieKd2/ZB+e:ARxlfMCBjmfBds7YWFZBr
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x7248x6743x6240x6709 (C) 2002
InternalName: DemoEditor
FileVersion: 1, 0, 0, 1
CompanyName:
LegalTrademarks:
ProductName: DemoEditor x5e94x7528x7a0bx5e8f
ProductVersion: 1, 0, 0, 1
FileDescription: DemoEditor Microsoft x57fax7840x7c7bx5e94x7528x7a0bx5e8f
OriginalFilename: DemoEditor.EXE
Translation: 0x0804 0x04b0

Trojan.Win32.Inject.amoie also known as:

DrWebTrojan.Inject3.31136
MicroWorld-eScanTrojan.GenericKD.32766745
FireEyeGeneric.mg.5d967f83e0c981fc
ALYacTrojan.GenericKD.32766745
AegisLabTrojan.Win32.Inject.4!c
K7AntiVirusTrojan ( 0055c7ff1 )
BitDefenderTrojan.GenericKD.32766745
K7GWTrojan ( 0055c7ff1 )
CrowdStrikewin/malicious_confidence_80% (W)
BitDefenderThetaGen:NN.ZexaF.32517.Wq2@aKn74Ppb
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Trojan.Generic-7417972-0
GDataWin32.Trojan-Spy.TrickBot.PDJRNG
KasperskyTrojan.Win32.Inject.amoie
Ad-AwareTrojan.GenericKD.32766745
SophosMal/Encpk-AOZ
F-SecureTrojan.TR/AD.TrickBot.hzath
McAfee-GW-EditionRDN/Generic.grp
IkarusTrojan-Spy.Win32.TrickBot
CyrenW32/Trojan.EDDE-5623
JiangminTrojan.Inject.bbbn
WebrootW32.Malware.Gen
AviraTR/AD.TrickBot.hzath
MAXmalware (ai score=89)
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D1F3FB19
ZoneAlarmTrojan.Win32.Inject.amoie
MicrosoftTrojan:Win32/Tiggre!rfn
AhnLab-V3Trojan/Win32.Agent.C3604514
McAfeeRDN/Generic.grp
MalwarebytesTrojan.TrickBot
PandaGeneric Malware
ESET-NOD32a variant of Win32/Kryptik.GYXL
TrendMicro-HouseCallTROJ_FRS.VSNW1CK19
YandexRiskware.BitMiner!
MaxSecureTrojan.Malware.74716534.susgen
FortinetW32/Emotet.BN!tr
AVGFileRepMalware
Qihoo-360Win32/Trojan.BO.471

How to remove Trojan.Win32.Inject.amoie?

Trojan.Win32.Inject.amoie removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment