Trojan

How to remove “Trojan.Win32.Injuke.rdi”?

Malware Removal

The Trojan.Win32.Injuke.rdi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Injuke.rdi virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Mimics the system’s user agent string for its own requests
  • Expresses interest in specific running processes
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Russian
  • Spoofs its process name and/or associated pathname to appear as a legitimate process
  • Attempts to modify proxy settings

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Win32.Injuke.rdi?


File Info:

crc32: 6D9B31B0
md5: 11085078ca1416a53b8f59601bae42c2
name: rw4XqVZBVmQ4.exe
sha1: 8335827961218392b2f79a03d4c88e84b3e46c04
sha256: 9fe25817ea784aff16ed9f1c5027668ea32ec708ac34c0bb65640671baa786cc
sha512: 951033c5a40e16b63f2d1e6af058d25ff8a4c7809c8d7b606561d1540e4bd9ab8186c87b0c69ade030219527d29baff24445eb39ab26724a96a00ef79d16d259
ssdeep: 12288:kRYxH5FNAuiTPq40c9iq5fbysU3z431xVB:h1AuOicQqx1ye1T
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2002
InternalName: ExpCheckTest
FileVersion: 1, 0, 0, 1
CompanyName:
LegalTrademarks:
ProductName: ExpCheckTest Application
ProductVersion: 1, 0, 0, 1
FileDescription: ExpCheckTest MFC Application
OriginalFilename: ExpCheckTest.EXE
Translation: 0x0409 0x04b0

Trojan.Win32.Injuke.rdi also known as:

MicroWorld-eScanTrojan.GenericKDZ.69463
CAT-QuickHealTrojan.CKGENERIC
Qihoo-360HEUR/QVM41.1.47CD.Malware.Gen
ALYacTrojan.GenericKDZ.69463
MalwarebytesTrojan.MalPack.TRE
AlibabaTrojan:Win32/Injuke.e75b456b
K7GWRiskware ( 0040eff71 )
TrendMicroTROJ_GEN.R002C0DHF20
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan.Win32.Injuke.rdi
BitDefenderTrojan.GenericKDZ.69463
TencentWin32.Trojan.Injuke.Dtiu
Ad-AwareTrojan.GenericKDZ.69463
FireEyeTrojan.GenericKDZ.69463
SophosTroj/Emotet-CLB
MAXmalware (ai score=89)
MicrosoftTrojan:Win32/Emotet.ARJ!MTB
GDataTrojan.GenericKDZ.69463
McAfeeEmotet-FQS!11085078CA14
ESET-NOD32a variant of Win32/GenKryptik.EQKD
TrendMicro-HouseCallTROJ_GEN.R002C0DHF20
RisingTrojan.Emotet!8.B95 (CLOUD)
FortinetPossibleThreat.MU
BitDefenderThetaGen:NN.Zextet.34152.Yy0@a4qNQBik
AVGWin32:BankerX-gen [Trj]
AvastWin32:BankerX-gen [Trj]
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Trojan.Win32.Injuke.rdi?

Trojan.Win32.Injuke.rdi removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment