Trojan

Trojan.Win64.Injects.aur information

Malware Removal

The Trojan.Win64.Injects.aur is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win64.Injects.aur virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

img.neko.airforce

How to determine Trojan.Win64.Injects.aur?


File Info:

crc32: 8ECED9DF
md5: f2d4fb095fba7b0824f76e6114f299b5
name: F2D4FB095FBA7B0824F76E6114F299B5.mlw
sha1: eb8849517111aa8d0688e00cebf4368c16e4f5db
sha256: 24dcd158651778db622e7ad72d70bce9ccd66ad754357285b9d3399c5dcb33d9
sha512: c42e66095a8435a28e00dda68be478807e4c1dd3677e5e468e683b4b5d7876890c39b8ecc1993c6fb0f931e71d539a69110596dd0477d41e9bac1af9aba253f8
ssdeep: 1536:EqhUQC4o9DSDuBUkLVHLpProTsp6+JoTsYXfuBzATShsqp4wZysy:fUp4Qeu+6prV6++nG+WuUfy
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Win64.Injects.aur also known as:

K7AntiVirusTrojan-Downloader ( 00581e741 )
LionicTrojan.Win64.Injects.4!c
DrWebTrojan.DownLoader42.26571
CynetMalicious (score: 99)
CylanceUnsafe
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (W)
K7GWTrojan-Downloader ( 00581e741 )
Cybereasonmalicious.17111a
CyrenW32/Agent.DVIH-1025
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.FVT
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
KasperskyTrojan.Win64.Injects.aur
BitDefenderTrojan.GenericKD.46934166
MicroWorld-eScanTrojan.GenericKD.46934166
TencentWin32.Trojan-downloader.Agent.Edxc
Ad-AwareTrojan.GenericKD.46934166
SophosGeneric PUA OL (PUA)
BitDefenderThetaGen:NN.ZexaF.34126.euW@aOJCmnpi
VIPRELookslike.Win32.Sirefef.c!ag (v)
McAfee-GW-EditionBehavesLike.Win32.Rontokbro.lc
FireEyeGeneric.mg.f2d4fb095fba7b08
EmsisoftTrojan.GenericKD.46934166 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.XPACK.Gen
MicrosoftTrojan:Win32/Tnega.VAM!MTB
GDataTrojan.GenericKD.46934166
AhnLab-V3Trojan/Win.Tnega.R440402
McAfeeRDN/Generic PUP.x
MAXmalware (ai score=84)
MalwarebytesMalware.AI.4242729908
PandaTrj/CI.A
RisingTrojan.Generic@ML.90 (RDML:jIZ6M4oa8GoG1hdiS8T0CQ)
IkarusTrojan.Inject
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.FVT!tr.dldr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan.Win64.Injects.aur?

Trojan.Win64.Injects.aur removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment