What is “Trojan.Win64.Inject.ir”?

The Trojan.Win64.Inject.ir is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win64.Inject.ir virus can do?

The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Trojan.Win64.Inject.ir?


File Info:
crc32: 24458DCA
md5: f56829a7ed06371517a5ee85fce3f33f
name: F56829A7ED06371517A5EE85FCE3F33F.mlw
sha1: a9e623c8ef80db9a8c16b8c5e83c44e350de9b33
sha256: 83cca8285b53bc061ee00f5eae51c72e4858d3a7b1b325408f132f072e6fb28a
sha512: 8e54ee3c8f0e19231fba09c6f9775b2288e5c57ee99f7ee80115a0bc255beaaf805cb9cc507d9e4d3484b53812d2d389d04f934a305d6f8f8a41e31037dd901b
ssdeep: 196608:ByiySiE1AuVsgLhJZt2ex3jfv02R6l3+9zeW94iIQM:ByMBV3Lhvt7JXROMlMQM
type: PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows

Version Info:
LegalCopyright: Copyright x412xa9 AS 2017
FileVersion: 2,0,7316,34247
CompanyName: AS SSD Benchmark
ProductName: Alex Schepeljanski
ProductVersion: 2,0,7316,34247
FileDescription: AS SSD Benchmark
FileTitle: AS SSD Benchmark.exe
LegalTrademark: Alex Schepeljanski
Translation: 0x0409 0x04b0

Trojan.Win64.Inject.ir also known as:

K7AntiVirus	Trojan ( 00589eec1 )
Lionic	Trojan.Multi.Generic.4!c
Elastic	malicious (high confidence)
ALYac	Trojan.GenericKD.47328835
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Trojan.GenericKD.47328835
K7GW	Trojan ( 00589eec1 )
Cybereason	malicious.8ef80d
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win64/Packed.VMProtect.NM
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win64.Inject.ir
MicroWorld-eScan	Trojan.GenericKD.47328835
Ad-Aware	Trojan.GenericKD.47328835
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.UMal.kakse@0
McAfee-GW-Edition	BehavesLike.Win64.Injector.vc
FireEye	Generic.mg.f56829a7ed063715
Emsisoft	Trojan.GenericKD.47328835 (B)
Webroot	W32.Trojan.Gen
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Tnega!ml
Gridinsoft	Trojan.Heur!.02296123
GData	Trojan.GenericKD.47328835
McAfee	Artemis!F56829A7ED06
MAX	malware (ai score=87)
Malwarebytes	Trojan.Crypt
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002H09K521
Yandex	Trojan.Inject!28eWKHY8Xyg
Ikarus	Trojan.Win64.Vmprotect
Fortinet	W32/PossibleThreat
Paloalto	generic.ml

How to remove Trojan.Win64.Inject.ir?

Trojan.Win64.Inject.ir removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X