What is “Trojan.Win32.Inject.anjcv”?

The Trojan.Win32.Inject.anjcv is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Trojan.Win32.Inject.anjcv virus can do?

• Executable code extraction
• Injection (inter-process)
• Injection (Process Hollowing)
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Reads data out of its own binary image
• Unconventionial binary language: Russian
• Unconventionial language used in binary resources: Russian
• Executed a process and injected code into it, probably while unpacking
• A process attempted to delay the analysis task by a long amount of time.
• Network activity detected but not expressed in API logs

How to determine Trojan.Win32.Inject.anjcv?

File Info:
crc32: 3305CEA0md5: 5372cc3875d27f63e82f4f06fffd4b7fname: 5372CC3875D27F63E82F4F06FFFD4B7F.mlwsha1: 6145959579f5dbfe64ecfe93b596f501181b8faasha256: 6222985bcd4084ed42f768ab62e3bd859b1a239db1bfd195bd5c75869d3cc72esha512: 47c81e4902f90e698f118997c392ce7b9cd5025fea81004164fad1ef33d564f02951d77a96a74b6bf2e942434a71b310ed9dc306b1b7f2ca7a7728f72a3f9ec2ssdeep: 12288:pcjekS/5oHetsLyRA/WFkxQrur/pRh57P1VlfGbK43qQv:pcjekSzurhRh9PlGjq0type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: 9f7dsafds f89dsf7 ds9f8 7sdf7s7 f7s89d f789sd7 ds9f 7sd8f7s9ddf7InternalName: f dgdfg dfg dfg 8df08gdf08g d8g 0d80g9df8 gdf98gd80gd90f8gdfg8FileVersion:  t3 323r 23r 234 tr23 32 r23rt34 34t 34 t3234234 2 424 r gter terg erger erPrivateBuild: sd f8sd 0sdf90 s8d fds9f9s8f0 s908f 90sd8f90 sd0f 8s90df8sd89f80sd8f 90sd8f 9s8fLegalTrademarks:  ds8df ds08f 0ds8f sd8f90s890fds98f9ds8fds80f8sdf80s8f0ds89f8ProductName: s df8sd8 0s9d f0ds90 fsd9f8 ds9 f80ds8f ds098 fs0d f0ds89f ds8fs90d8f 0sd890 fds0f8ProductVersion: 09f8ds 8s0df890sd8 fsd90 f8a0890 80s f89ds8f s08f9s80f sd0 f890ds8fs90d8f9sf90sd8fFileDescription: e erw rwe3r 234 5r34  t34t 34t 34 t34t OriginalFilename: d fg 90f8h0f90 g0hf0gf0gh80gf8h98 f9f8g8h90fh fh80fg8 h90fg8h9fg90hfghTranslation: 0x0419 0x04b0

Trojan.Win32.Inject.anjcv also known as:

How to remove Trojan.Win32.Inject.anjcv?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.