Trojan

What is “Trojan.Win32.Injuke.hrwa”?

Malware Removal

The Trojan.Win32.Injuke.hrwa is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Injuke.hrwa virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid

How to determine Trojan.Win32.Injuke.hrwa?


File Info:

name: 003364FAFCFA8F7CD17C.mlw
path: /opt/CAPEv2/storage/binaries/93b6a67bb979302a8bad0c477d8e962b7612b82a53dce0d8b6c3a6782f21e9dc
crc32: AB493213
md5: 003364fafcfa8f7cd17cd17e82c9879e
sha1: 7d9996a925db43ff4fcf1221274c47aefa91c569
sha256: 93b6a67bb979302a8bad0c477d8e962b7612b82a53dce0d8b6c3a6782f21e9dc
sha512: e533bbc1f64c5dda110e2f0cc9228c788bfa5c5b4a2c66d36acc02b4dd7f45398a236f6bf05a8379f962c5086349afa4e241de19cd81619d0bbef5f5a99b31b4
ssdeep: 98304:VQnIxXgMOx1qL2hsQ0YXgQ7+yAbMnTcevJSPOu6fX:Knprxs8YYXgQ7+yAbAvtuI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17A163325BBC412F2C841EA74F3BD62356A7DAE3C8521C987FFE26D9978BC455C904883
sha3_384: 417140fb4176083fd42dafa3e7e049eec7fd57be9164d15309e8bd3348990bca9831d380a96098c73bd4de52991724a5
ep_bytes: e8f32a000050e83b3301000000000090
timestamp: 2007-09-20 12:34:46

Version Info:

0: [No Data]

Trojan.Win32.Injuke.hrwa also known as:

LionicHacktool.Win32.Convagent.3!c
MicroWorld-eScanTrojan.GenericKD.68986718
FireEyeGeneric.mg.003364fafcfa8f7c
CAT-QuickHealRansom.Genasom.16527
McAfeeArtemis!003364FAFCFA
Cylanceunsafe
VIPRETrojan.GenericKD.68986718
SangforTrojan.Win32.Packed.Vp8j
K7AntiVirusAdware ( 005071f51 )
AlibabaTrojan:Win32/Injuke.0cb3b1e6
K7GWAdware ( 005071f51 )
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/OnlineGames.HI.gen!Eldorado
ESET-NOD32a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEXMalicious
ClamAVWin.Trojan.Bho-4509
KasperskyTrojan.Win32.Injuke.hrwa
BitDefenderTrojan.GenericKD.68986718
NANO-AntivirusTrojan.Win32.QQPass.cynhvv
AvastWin32:Malware-gen
TencentWin32.Trojan.Injuke.Dkjl
EmsisoftTrojan.GenericKD.68986718 (B)
F-SecureTrojan.TR/Redcap.qcfkk
DrWebTrojan.StartPage1.60392
ZillyaDropper.Agent.Win32.61131
TrendMicroTROJ_GEN.R002C0XI223
McAfee-GW-EditionBehavesLike.Win32.Dropper.wc
SophosGeneric Reputation PUA (PUA)
GDataWin32.Trojan.PSE.1BLW41
JiangminTrojan/PSW.QQPass.ong
GoogleDetected
AviraTR/Redcap.koldf
Antiy-AVLTrojan/Win32.FlyStudio.a
ArcabitTrojan.Generic.D41CA75E
ZoneAlarmTrojan.Win32.Injuke.hrwa
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
BitDefenderThetaGen:NN.ZexaF.36722.kpKfaamus4eb
ALYacTrojan.GenericKD.68986718
MAXmalware (ai score=80)
VBA32BScope.Trojan.FlyStudio
MalwarebytesGeneric.Malware/Suspicious
TrendMicro-HouseCallTROJ_GEN.R002C0XI223
RisingPUA.Convagent!8.132AF (CLOUD)
SentinelOneStatic AI – Malicious SFX
FortinetW32/CoinMiner.PHP!tr
AVGWin32:Malware-gen
Cybereasonmalicious.925db4
DeepInstinctMALICIOUS

How to remove Trojan.Win32.Injuke.hrwa?

Trojan.Win32.Injuke.hrwa removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment