What is “Trojan.Win32.Injuke.hyod”?

The Trojan.Win32.Injuke.hyod is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Injuke.hyod virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses suspicious command line tools or Windows utilities
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Injuke.hyod?

File Info:
name: 4F13CEFC8E9696A60D6F.mlw
path: /opt/CAPEv2/storage/binaries/a984082ca423e98d0cb3652d556cd8daa0898752efc53dfb9d64af127cec8020
crc32: 37804908
md5: 4f13cefc8e9696a60d6f8ade7711fff9
sha1: 4940906b5f8f3d1066e31b31685565ae2660aff0
sha256: a984082ca423e98d0cb3652d556cd8daa0898752efc53dfb9d64af127cec8020
sha512: 819212457793c17e42f7568dcaafb2a2f9fa8c1195c2d83ba398f4d6e91aa9caf41b44849ae76bacf83ad221cc47f13343546c9efcfded605fe4aa0ba3a3b506
ssdeep: 49152:nGaXyi2C9udOC9R0FK9LuQbKwAIxYViI6jx5LoqLyUJGXrv:GaC7ImR0FsiQbEVr0GL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11BB5334CFA2864B0DB2157F41D8ACA73523BBD6A56301E4E3719FD16D8E3AE4C21AF11
sha3_384: b807a617236c89e8022ffa3e7394163271e87d77fb5e8ae95ab2607a5264e17409233b423863bc50f9ea744715251348
ep_bytes: 558bec83c4cc53565733c08945f08945
timestamp: 2023-09-12 05:27:22

Version Info:
Comments: This installation was built with Inno Setup: http://www.innosetup.com
CompanyName:                                                             
FileDescription: Mouse Clicker Setup                                         
FileVersion:                     
LegalCopyright:                                                                                                     
Translation: 0x0409 0x04e4

Trojan.Win32.Injuke.hyod also known as:

How to remove Trojan.Win32.Injuke.hyod?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.