How to remove “Trojan:Win32/CryptInject.AH”?

The Trojan:Win32/CryptInject.AH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/CryptInject.AH virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan:Win32/CryptInject.AH?


File Info:
name: B65B82EDDCECD719C55D.mlw
path: /opt/CAPEv2/storage/binaries/06dec0082eac094dc0b4b3de8854f190f1d3112dada0d414d9a085a0ee309199
crc32: 1A1B61A8
md5: b65b82eddcecd719c55d6d222926e648
sha1: 82e579bd49d69845133c9aa8585f8bd26736437b
sha256: 06dec0082eac094dc0b4b3de8854f190f1d3112dada0d414d9a085a0ee309199
sha512: ad9352f7ae092465907731d7d1f03c7ade7813374805d14b01d7a8ae593877e1936c469dc0a4db0317da631dfc6d08d9b3e3e7777b5d849701fc5b497949913a
ssdeep: 1536:rq3vKpdUQ5hHhjF9Smvu8W7hW1VvXANksSTiO6/DIC3:rwSJhBo8oW3vXAhSTh6/Dj
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T15C738D92B59180B6D0EA0D35505666A69B7F7A825FF481C77BC80739BFE03C02A743F5
sha3_384: 23630926072c09e3ed6310c0ea9f9918c9487913a271a04ec238e61656269d160e525d7d4289cb36eaa16358ab564c29
ep_bytes: 8bff558bec837d0c017505e83c290000
timestamp: 2008-09-13 13:38:46

Version Info:
0: [No Data]

Trojan:Win32/CryptInject.AH also known as:

Bkav	W32.Common.AF73AB8C
Lionic	Trojan.Win32.DllHijacker.4!c
MicroWorld-eScan	Gen:Variant.Midie.115184
CAT-QuickHeal	Trojan.APT32.S15325070
Skyhigh	BehavesLike.Win32.Infected.lh
McAfee	GenericRXAA-AA!B65B82EDDCEC
Malwarebytes	Malware.AI.4230458284
Zillya	Trojan.Dllhijacker.Win32.7
Sangfor	Trojan.Win32.OceanLotus.IOC
K7AntiVirus	Trojan ( 005a17361 )
Alibaba	Trojan:Win32/DllHijacker.93146d8c
K7GW	Trojan ( 005a17361 )
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	Backdoor.Ohlotus
ESET-NOD32	a variant of Win32/Salgorea.BD
TrendMicro-HouseCall	TROJ_FRS.0NA103C320
Kaspersky	Trojan.Win32.DllHijacker.el
BitDefender	Gen:Variant.Midie.115184
NANO-Antivirus	Trojan.Win32.Dllhijacker.eylmgj
Avast	Win32:OceanLotus-B [Trj]
Tencent	Malware.Win32.Gencirc.10bc57e0
Emsisoft	Gen:Variant.Midie.115184 (B)
Google	Detected
F-Secure	Heuristic.HEUR/AGEN.1302716
DrWeb	Trojan.Siggen7.62595
VIPRE	Gen:Variant.Midie.115184
TrendMicro	TROJ_FRS.0NA103C320
FireEye	Generic.mg.b65b82eddcecd719
Sophos	Mal/Generic-R
Jiangmin	Backdoor.Agent.lvz
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1302716
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.Dllhijacker
Kingsoft	malware.kb.a.823
Microsoft	Trojan:Win32/CryptInject.AH
Xcitium	Malware@#6sk4tvqv5tdb
Arcabit	Trojan.Midie.D1C1F0
ViRobot	Trojan.Win32.S.Agent.79872.GJ
ZoneAlarm	Trojan.Win32.DllHijacker.el
GData	Gen:Variant.Midie.115184
Cynet	Malicious (score: 100)
AhnLab-V3	Unwanted/Win.Agent.R505510
BitDefenderTheta	Gen:NN.ZedlaF.36802.eu4@a8ilGZli
ALYac	Trojan.DllHijacker
VBA32	Trojan.Dllhijacker
Cylance	unsafe
Panda	Trj/GdSda.A
Rising	Trojan.Generic@AI.82 (RDMK:wMQ05OTjK5jeVknjtz1H8Q)
Ikarus	Trojan.Win32.Salgorea
MaxSecure	Trojan.Malware.1728101.susgen
Fortinet	W32/Bckdoor.AP!tr
AVG	Win32:OceanLotus-B [Trj]
DeepInstinct	MALICIOUS
alibabacloud	Trojan:Win/Salgorea.BD

How to remove Trojan:Win32/CryptInject.AH?

Trojan:Win32/CryptInject.AH removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X