Trojan

About “Trojan.Win32.Inject.bbyo” infection

Malware Removal

The Trojan.Win32.Inject.bbyo is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Inject.bbyo virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine Trojan.Win32.Inject.bbyo?


File Info:

crc32: 96FFC72C
md5: 581d771b6c5a20bda01ee5c1a6b874b6
name: 581D771B6C5A20BDA01EE5C1A6B874B6.mlw
sha1: 86d6eba4ccca80fbdd9f2e3a2c3b2f8e243d8e38
sha256: dd69c1344d9b99b9fd6c9ba85676d1ea878d6f5579b5f1f437cdb50ab62596d5
sha512: a0a521ca43b6e0993dc10f58c6e6dcda2a8c32b9382bd41dcb7bcc818e8d6972c3bc0a3d0872e66ce500d9f6c345068eaee6a3b9d61d7e23bdfd8c4761f2e642
ssdeep: 384:auEgKlsX3QUnUMxDZLacX9jPu3ML3bED/faQybPp15HZ:pMeX3jnUCvX9rucjm/CQI3z
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright ? 1996-2010 Adobe, Inc.
InternalName: Adobe? Flash? Player Installer/Uninstaller 10.1
FileVersion: 10,1,53,64
CompanyName: Adobe Systems, Inc.
LegalTrademarks: Adobe? Flash? Player
ProductName: Flash? Player Installer/Uninstaller
ProductVersion: 10,1,53,64
FileDescription: Adobe? Flash? Player Installer/Uninstaller 10.1 r53
OriginalFilename: FlashUtil.exe
Translation: 0x0409 0x04b0

Trojan.Win32.Inject.bbyo also known as:

BkavW32.InNhcA.Worm
Elasticmalicious (high confidence)
ClamAVWin.Trojan.Inject-132
FireEyeGeneric.mg.581d771b6c5a20bd
CAT-QuickHealBackdoor.Simbot.G4
McAfeeBackDoor-EYG
CylanceUnsafe
VIPRETrojan.Win32.Inject.cj (v)
AegisLabTrojan.Win32.Inject.lJhA
K7AntiVirusTrojan ( 002331771 )
BitDefenderGen:Variant.Zusy.320925
K7GWTrojan ( 001fbdf71 )
Cybereasonmalicious.b6c5a2
BitDefenderThetaAI:Packer.721905D21F
CyrenW32/Injector.AV.gen!Eldorado
SymantecTrojan.Dropper
ESET-NOD32a variant of Win32/Injector.ELH
BaiduWin32.Trojan.Inject.bf
APEXMalicious
AvastWin32:Taidoor-D [Trj]
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Inject.bbyo
NANO-AntivirusTrojan.Win32.Inject.dlohzw
ViRobotBackdoor.Win32.Simbot.27648
MicroWorld-eScanGen:Variant.Zusy.320925
RisingMalware.Obscure/Heur!1.A89E (CLASSIC)
Ad-AwareGen:Variant.Zusy.320925
SophosML/PE-A + Troj/CeeInj-M
ComodoTrojWare.Win32.Inject.ka@4o81ww
F-SecureTrojan.TR/Crypt.ZPACK.Gen
DrWebTrojan.DownLoad2.36100
ZillyaTrojan.InjectGen.Win32.5
TrendMicroTROJ_KRYPTK.SMS
McAfee-GW-EditionBehavesLike.Win32.Backdoor.mh
EmsisoftGen:Variant.Zusy.320925 (B)
SentinelOneStatic AI – Malicious PE – Spyware
AviraTR/Crypt.ZPACK.Gen
Antiy-AVLTrojan/Win32.Inject.bbyo
MicrosoftTrojan:Win32/Dorv.A
ArcabitTrojan.Zusy.D4E59D
SUPERAntiSpywareBackdoor.Agent/Gen-Simbot
AhnLab-V3Backdoor/Win32.CSon.R7666
ZoneAlarmTrojan.Win32.Inject.bbyo
GDataGen:Variant.Zusy.320925
Acronissuspicious
VBA32SScope.Backdoor.Simbot
ALYacGen:Variant.Zusy.320925
MalwarebytesSimbot.Backdoor.Stealer.DDS
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_KRYPTK.SMS
TencentTrojan.Win32.Inject.bbyoa
YandexTrojan.GenAsa!5YxMY2U2QLk
MAXmalware (ai score=88)
FortinetW32/Injector.ELH!tr
AVGWin32:Taidoor-D [Trj]
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/Trojan.d1c

How to remove Trojan.Win32.Inject.bbyo?

Trojan.Win32.Inject.bbyo removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment