Trojan

Should I remove “Trojan.Win32.Inject.anqhy”?

Malware Removal

The Trojan.Win32.Inject.anqhy is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Inject.anqhy virus can do?

  • Creates RWX memory
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Queries information on disks, possibly for anti-virtualization

How to determine Trojan.Win32.Inject.anqhy?


File Info:

crc32: A996CFB8
md5: f19fce3acea3b897e8d648118b158100
name: F19FCE3ACEA3B897E8D648118B158100.mlw
sha1: f637bf7c95bb0534a1282eafbd146571fa3bc152
sha256: 15493563f7f58b2fd4209a293185b8a35ce2e4e41776a79a6d2e937b070595f6
sha512: 4d7eb3b1c27c581f0e2b21b945fee98731cf56019310a47dfab0576a87bf0f683fad4e5334be46ea7615144628e89f935c0061b1a4c3f302c775546b675b6227
ssdeep: 12288:rOMJFghe0x3Aj8KbOZ9jlVhKwITFQIliNRWh/Q1hBG3/q:r1JFghZnKaZFlpITFQRNRWhj3/q
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x4f5cx8005x7248x6743x6240x6709 x8bf7x5c0ax91cdx5e76x4f7fx7528x6b63x7248
FileVersion: 1.0.0.0
Comments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.eyuyan.com)
ProductName: x6613x8bedx8a00x7a0bx5e8f
ProductVersion: 1.0.0.0
FileDescription: x6613x8bedx8a00x7a0bx5e8f
Translation: 0x0804 0x04b0

Trojan.Win32.Inject.anqhy also known as:

Elasticmalicious (high confidence)
DrWebTrojan.Inject4.11500
CynetMalicious (score: 100)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/Trojan.KBGL-0755
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.BBYK
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Dropper.Tiggre-9845940-0
KasperskyTrojan.Win32.Inject.anqhy
SophosMal/FakeAV-PH
ComodoTrojWare.Win32.ServStart.DM@6edgy4
BitDefenderThetaGen:NN.ZedlaF.34688.Su8@a0QhcKdb
TrendMicroTROJ_GEN.R005C0PE921
McAfee-GW-EditionBehavesLike.Win32.Generic.bc
FireEyeGeneric.mg.f19fce3acea3b897
SentinelOneStatic AI – Suspicious PE
MicrosoftProgram:Win32/Wacapew.C!ml
GDataWin32.Application.PUPStudio.A
McAfeeGenericRXHW-LO!F19FCE3ACEA3
VBA32BScope.Trojan.Tiggre
MalwarebytesRiskWare.Agent.EY
TrendMicro-HouseCallTROJ_GEN.R005C0PE921
RisingMalware.Heuristic!ET#89% (RDMK:cmRtazq9AmA43ixTSpIFnp0zuhMd)
IkarusPUA.BlackMoon
MaxSecureDropper.Dinwod.frindll
FortinetRiskware/Blackmoon
AVGWin32:Trojan-gen

How to remove Trojan.Win32.Inject.anqhy?

Trojan.Win32.Inject.anqhy removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment