Trojan

Trojan.Win32.Inject.amuef removal instruction

Malware Removal

The Trojan.Win32.Inject.amuef is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Inject.amuef virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Hebrew
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself

How to determine Trojan.Win32.Inject.amuef?


File Info:

crc32: 41FD7E32
md5: c1c28031d6428291435c04c6bea5a1c9
name: yas16.exe
sha1: 68b93e688e131543d32e461d07933ae5265c856b
sha256: f11ea84a9a492c934ee32e5884a3583aaec82ab24ff08c5c1d8c984184982de6
sha512: 671c73a3217c0014b4e77b240d28cd7f3ec3b0b9593bb09362e756ef7373563c70b1343e05777fc45a1b6490bf418537428232619cf0e186d6513e0847344aaa
ssdeep: 6144:y1XasIStWxzhHdnKgx7sI6N9Vbhu1aGSucpvuIA2PZsZfC4ooO:yE8mHKK7j6N7bhu0GSu2HRPr4ooO
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Biden is still not a terribly good debater, however
InternalName: Democrats of nominating a democratic socialist
FileVersion: 5, 67, 23, 1
CompanyName: Meidan
LegalTrademarks:
ProductName: The Vermont senator got hit with a few hard punches to which
OLESelfRegister:
ProductVersion: 45, 667, 223, 889
FileDescription: t was an incredibly contentious affair, with candidates shouting
OriginalFilename: He repeatedly complained about the rules of the debate
Translation: 0x0409 0x04b0

Trojan.Win32.Inject.amuef also known as:

MicroWorld-eScanTrojan.GenericKD.33396976
McAfeeArtemis!C1C28031D642
CylanceUnsafe
AegisLabTrojan.Multi.Generic.4!c
CrowdStrikewin/malicious_confidence_60% (W)
BitDefenderTrojan.GenericKD.33396976
K7GWTrojan ( 005616831 )
K7AntiVirusTrojan ( 005616831 )
SymantecTrojan.Gen.2
GDataTrojan.GenericKD.33396976
KasperskyTrojan.Win32.Inject.amuef
AlibabaTrojanDropper:Win32/dropper.ali1003001
APEXMalicious
RisingTrojan.Kryptik!8.8 (CLOUD)
Ad-AwareTrojan.GenericKD.33396976
SophosMal/Generic-S
F-SecureTrojan.TR/AD.TrickBot.lnhzg
McAfee-GW-EditionBehavesLike.Win32.BadFile.fc
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.c1c28031d6428291
EmsisoftTrojan.GenericKD.33396976 (B)
SentinelOneDFI – Suspicious PE
AviraTR/AD.TrickBot.lnhzg
MAXmalware (ai score=80)
Endgamemalicious (moderate confidence)
ArcabitTrojan.Generic.D1FD98F0
ZoneAlarmTrojan.Win32.Inject.amuef
MicrosoftTrojan:Win32/Occamy.C
VBA32BScope.TrojanDropper.Dapato
ALYacBackdoor.Agent.Trickbot
MalwarebytesTrojan.TrickBot
ESET-NOD32a variant of Win32/Kryptik.HBNF
IkarusTrojan.Win32.Crypt
FortinetW32/Kryptik.HBNF!tr
AVGWin32:DropperX-gen [Drp]
AvastWin32:DropperX-gen [Drp]
Qihoo-360Generic/Trojan.Generic.ea2

How to remove Trojan.Win32.Inject.amuef?

Trojan.Win32.Inject.amuef removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment