Trojan

Trojan.Win32.Runner.inv (file analysis)

Malware Removal

The Trojan.Win32.Runner.inv is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Runner.inv virus can do?

  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Network activity detected but not expressed in API logs

How to determine Trojan.Win32.Runner.inv?


File Info:

crc32: EEEA0FAE
md5: 7666983b624932ddc3f84b2e6e041231
name: 7666983B624932DDC3F84B2E6E041231.mlw
sha1: 2fc39a9a1761ed516f295498768015040f47ad8a
sha256: be72e95f270735bb4f1a6fae8a9d1961c1109eb8b2bd966078fec63601eba8ca
sha512: d9d3dd3dc606b87bb0b347ebea79acf8c86fe9af3ca5ffa128ccb06ac68c769c7ae64a9e6ee2c24c19541d4ca642e5057e55843974b2a27f92ea7ccc787070f4
ssdeep: 24576:Y2G/nvxW3WsTYh5NAL4eXZgNAdF6zXyPo5E31fdJQF6iXyJo5oJqPf7ME:YbA3DYh5N1eXIYwQUEl7QwPUokPzME
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Win32.Runner.inv also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Rasftuby.Gen.14
FireEyeGeneric.mg.7666983b624932dd
ALYacTrojan.Rasftuby.Gen.14
CylanceUnsafe
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.Rasftuby.Gen.14
K7GWRiskware ( 0040eff71 )
CrowdStrikewin/malicious_confidence_60% (D)
CyrenW32/Trojan.ODZS-2684
SymantecTrojan.Gen.2
ESET-NOD32a variant of Generik.LQFODDV
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan.Win32.Runner.inv
AlibabaTrojan:Win32/Runner.798250a3
ViRobotTrojan.Win32.Z.Rasftuby.1012060.D
AegisLabTrojan.Win32.Runner.4!c
TencentWin32.Trojan.Runner.Ahes
Ad-AwareTrojan.Rasftuby.Gen.14
EmsisoftTrojan.Agent (A)
McAfee-GW-EditionBehavesLike.Win32.Suspicioustrojan.dc
SophosMal/Generic-S
IkarusWin32.Outbreak
MicrosoftTrojan:Win32/Ymacco.AABE
GridinsoftRansom.Win32.Wacatac.oa
ArcabitTrojan.Rasftuby.Gen.14
ZoneAlarmTrojan.Win32.Runner.inv
GDataWin32.Trojan-Downloader.Generic.ZHW13M
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R360804
McAfeeArtemis!7666983B6249
MAXmalware (ai score=87)
MalwarebytesTrojan.Dropper.SFX
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002H09LQ20
FortinetW32/Generik.LQFODDV!tr
AVGWin32:Malware-gen
Cybereasonmalicious.b62493
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.a56

How to remove Trojan.Win32.Runner.inv?

Trojan.Win32.Runner.inv removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment