Trojan

About “Trojan.Win32.Inject.amsdq” infection

Malware Removal

The Trojan.Win32.Inject.amsdq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Inject.amsdq virus can do?

  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.

How to determine Trojan.Win32.Inject.amsdq?


File Info:

crc32: 1F7B6098
md5: 8846a8d32b0c807602af16faf6e8a168
name: yas12.exe
sha1: 328dc8d1108c0719cefa2276f3d51f8b117591a0
sha256: 515774b104bd0db75a2ee5c0d57a2aaa49277ca6923593edafffae4cc34df540
sha512: 1882de80226b1fd67f9c9bba00eb780aed0747a50d014cad7be0b2cded9512847f3f9192289626d0cb99d56bc49e0634dc6a8eb1c863a12f26a25e99ea56c190
ssdeep: 3072:cHGfScuZRUvajQ3HbRcECLPM37j10rjw12/BEHaGRimAkdaVnBWBhPnjBhPpn2i:w1ZRiac6hPgf1K0RruTB+PjB/n2ipd
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2008
InternalName: WinHttpGatewayTest
FileVersion: 1, 0, 0, 1
CompanyName:
LegalTrademarks:
ProductName: WinHttpGatewayTest Application
ProductVersion: 1, 0, 0, 1
FileDescription: WinHttpGatewayTest MFC Application
OriginalFilename: WinHttpGatewayTest.EXE
Translation: 0x0409 0x04b0

Trojan.Win32.Inject.amsdq also known as:

MicroWorld-eScanTrojan.GenericKDZ.64892
McAfeeRDN/Generic.dx
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan ( 005605291 )
BitDefenderTrojan.GenericKDZ.64892
K7GWTrojan ( 005605291 )
ArcabitTrojan.Generic.DFD7C
TrendMicroTROJ_GEN.R015C0DBI20
CyrenW32/Trojan.WVTA-4650
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HBFF
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan.Win32.Inject.amsdq
AlibabaTrojan:Win32/Trickbot.2ebf0c56
Ad-AwareTrojan.GenericKDZ.64892
EmsisoftTrojan.Emotet (A)
F-SecureTrojan.TR/Crypt.Agent.vfpfx
DrWebTrojan.Packed.140
VIPRETrojan.Win32.Generic!BT
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
FortinetW32/Kryptik.EEDP!tr
Trapminemalicious.high.ml.score
FireEyeTrojan.GenericKDZ.64892
SophosMal/Generic-S
IkarusTrojan.Win32.Crypt
F-ProtW32/Emotet.AHR.gen!Eldorado
WebrootW32.Malware.Gen
AviraTR/Crypt.Agent.vfpfx
MAXmalware (ai score=86)
Antiy-AVLTrojan/Win32.Detplock
Endgamemalicious (high confidence)
MicrosoftTrojan:Win32/Trickbot.BS!MTB
ViRobotTrojan.Win32.Trickbot.237568.C
ZoneAlarmTrojan.Win32.Inject.amsdq
ALYacBackdoor.Agent.Trickbot
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R015C0DBI20
RisingTrojan.Trickbot!8.E313 (CLOUD)
SentinelOneDFI – Suspicious PE
GDataTrojan.GenericKDZ.64892
BitDefenderThetaGen:NN.ZexaE.34090.oq0@ay8YM4fk
AVGFileRepMalware
AvastFileRepMalware
CrowdStrikewin/malicious_confidence_70% (W)
Qihoo-360Generic/Trojan.d22

How to remove Trojan.Win32.Inject.amsdq?

Trojan.Win32.Inject.amsdq removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment