Trojan.Win32.Inject.anyrn removal guide

The Trojan.Win32.Inject.anyrn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Inject.anyrn virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• A process created a hidden window
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Steals private information from local Internet browsers
• Spoofs its process name and/or associated pathname to appear as a legitimate process
• CAPE detected the Loki malware family
• Creates a copy of itself
• Harvests credentials from local FTP client softwares
• Harvests information related to installed instant messenger clients
• Harvests information related to installed mail clients
• Collects information to fingerprint the system

How to determine Trojan.Win32.Inject.anyrn?

File Info:
name: 36D32FF7989AFEEC1B42.mlw
path: /opt/CAPEv2/storage/binaries/4687fba791246d45216358ee2d0e47d9c62048a413f94f4e05c5273d8db6df5d
crc32: F56B18E6
md5: 36d32ff7989afeec1b42c76824813dbc
sha1: 0827b6c50edb57e49eaf1e436ed0b818abdbfa0c
sha256: 4687fba791246d45216358ee2d0e47d9c62048a413f94f4e05c5273d8db6df5d
sha512: e5125465ed6d48f7a61cf10b86d9db3aa72e26ff14dc5209448392ef04f72ce6accefcd6273a640fd8119f53ce303b106f47bb8f3bac68ccfe1330154d6249b2
ssdeep: 6144:rGifimDp5C1Rv5SM9khrKZBaJaUonMVU+ZWNvMpbNIA4ENSi:riml5kBGrqBi4UcvMXRV
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1504412475DD11DF7CD9295322AFBD2BCD7AF9AC921A62A433BD12FFD24924028A04212
sha3_384: 87d57c50fd9b620b05f900ae4aaadebc1c4a7449d87a97c48524ebc9a62aaa776161133351c8a2cf14594e84a848ab97
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2008-10-10 21:49:01

Version Info:
0: [No Data]

Trojan.Win32.Inject.anyrn also known as:

How to remove Trojan.Win32.Inject.anyrn?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.