Trojan

Trojan.Win32.Injuke.kol removal instruction

Malware Removal

The Trojan.Win32.Injuke.kol is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Injuke.kol virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Performs some HTTP requests
  • Uses Windows utilities for basic functionality
  • Creates a hidden or system file
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.bing.com
appealingedge.xyz

How to determine Trojan.Win32.Injuke.kol?


File Info:

crc32: 26DAB8CB
md5: eec836d321ac17cd20a66c10b0d0d3fc
name: upload_file
sha1: 7bdc1527917f6497bef69785c765ae279935d160
sha256: 5208d85239499375d151e2e9bcad3088bad8f96debf2d2c4e468670eac776c4f
sha512: 35ce9630353d806f5841fabd377cfacf512e9b9bca6e9e781170831e02778cc15c1efa5062cabe76167c6d83a40b1d02f75953711273123f28a09f1b98e19346
ssdeep: 3072:IFNthWQl/rSJ7lvt9filcZritkrINAEYsm2:IBhWQ/mJLflrOAp2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX: @x10x01FileVersion
edbit: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXX: |,x01LegalCopyright
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX: ?,x01FileDescription
CompanyName: speedbit
Translation: 0x0409 0x04e4

Trojan.Win32.Injuke.kol also known as:

BkavW32.AIDetectVM.malware1
MicroWorld-eScanTrojan.GenericKD.43555781
FireEyeGeneric.mg.eec836d321ac17cd
CAT-QuickHealTrojanPWS.Zbot.Y
Qihoo-360Win32/Trojan.408
McAfeePacked-GCB!EEC836D321AC
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Gozi.trsf
SangforMalware
K7AntiVirusTrojan ( 0056b69c1 )
BitDefenderTrojan.GenericKD.43555781
K7GWTrojan ( 0056b69c1 )
Cybereasonmalicious.7917f6
Invinceaheuristic
CyrenW32/Trojan.OEHK-0108
SymantecInfostealer.Snifula
TrendMicro-HouseCallTROJ_GEN.R002C0DGV20
Paloaltogeneric.ml
GDataTrojan.GenericKD.43555781
KasperskyTrojan.Win32.Injuke.kol
AlibabaTrojan:Win32/Injuke.28b8f9d2
ViRobotTrojan.Win32.Z.Gozi.256635
TencentWin32.Trojan.Crypt.Apcy
Endgamemalicious (high confidence)
SophosMal/EncPk-APV
F-SecureTrojan.TR/Gozi.yvyxa
DrWebTrojan.Gozi.703
ZillyaTrojan.Gozi.Win32.3046
TrendMicroTROJ_GEN.R002C0DGV20
SentinelOneDFI – Malicious PE
Trapminemalicious.high.ml.score
EmsisoftTrojan.GenericKD.43555781 (B)
F-ProtW32/Fugrafa.K.gen!Eldorado
JiangminTrojan.Banker.Gozi.bah
AviraTR/Gozi.yvyxa
MAXmalware (ai score=86)
Antiy-AVLGrayWare/Win32.Kryptik.ehls
MicrosoftTrojan:Win32/Gozi.PE!MTB
ArcabitTrojan.Generic.D2989BC5
ZoneAlarmTrojan.Win32.Injuke.kol
CynetMalicious (score: 85)
AhnLab-V3Trojan/Win32.Kryptik.C4170640
Acronissuspicious
ALYacTrojan.GenericKD.43555781
VBA32BScope.Trojan-Spy.Zbot
MalwarebytesBackdoor.Qbot
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.HFGZ
RisingTrojan.MalCert!1.C99C (CLOUD)
IkarusTrojan.Win32.Crypt
FortinetW32/Agent.900E!tr
Ad-AwareTrojan.GenericKD.43555781
AVGWin32:TrojanX-gen [Trj]
AvastWin32:TrojanX-gen [Trj]
CrowdStrikewin/malicious_confidence_80% (W)

How to remove Trojan.Win32.Injuke.kol?

Trojan.Win32.Injuke.kol removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment