Trojan

Trojan:Win32/CryptInject!pz removal guide

Malware Removal

The Trojan:Win32/CryptInject!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/CryptInject!pz virus can do?

  • Unconventionial language used in binary resources: Arabic (Oman)
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Trojan:Win32/CryptInject!pz?


File Info:

name: B285C4C11D561F138E82.mlw
path: /opt/CAPEv2/storage/binaries/3f4213f0edaa23f60d6cb4093dd8820edec59f27c521d685a28596dd6844ebdf
crc32: 9ACA1F70
md5: b285c4c11d561f138e82db82d21ab6a4
sha1: c2b936a465e6043131c7b11028e652f776859793
sha256: 3f4213f0edaa23f60d6cb4093dd8820edec59f27c521d685a28596dd6844ebdf
sha512: dbc42e2b731fa0fb43e5019d43d56de91fb0004d4209e5198063f8cc1002c013bb78097131ba44367fdc3214262b5cd939022ebd8cfcd6eb004b3db26fa5d298
ssdeep: 12288:AKNF+x+LB/+IXYuJga7n0zE5B87w5YSfk0Iy4Y0EsMl:AM+VuJga7SE5uwhfk0Iy4l7A
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C7B47C04AC80927DC5BF1A387A6885D39BFCBAE82D34487B5BC8947C4D647B5B607738
sha3_384: 31965cdfeac44da0b2fd8592a1a14e112b9a564a7905f3dc1c4d4dfa2d24929869e028a278399e801b42e2339bc0fe4b
ep_bytes: e8bb110000e95b0c0000cccccccccccc
timestamp: 2017-05-08 15:39:57

Version Info:

0: [No Data]

Trojan:Win32/CryptInject!pz also known as:

BkavW32.AIDetectMalware
LionicWorm.Win32.Androm.o!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Mikey.64750
CAT-QuickHealBackdoor.Androm.A5
SkyhighBehavesLike.Win32.Trojan.hh
ALYacGen:Variant.Mikey.64750
Cylanceunsafe
ZillyaTrojan.Kryptik.Win32.1159932
SangforSuspicious.Win32.Save.a
AlibabaMalware:Win32/km_2cee2.None
K7GWTrojan ( 0050cc221 )
K7AntiVirusTrojan ( 0050cc221 )
ArcabitTrojan.Mikey.DFCEE
SymantecSMG.Heur!gen
ESET-NOD32a variant of Win32/Kryptik.FSJS
APEXMalicious
TrendMicro-HouseCallTROJ_LETHIC.SMT
Paloaltogeneric.ml
ClamAVWin.Packed.Zusy-7039406-1
KasperskyHEUR:Worm.Win32.Oxynoxy.gen
BitDefenderGen:Variant.Mikey.64750
NANO-AntivirusTrojan.Win32.Kryptik.eojzzq
AvastWin32:Bzofiku-A [Drp]
TencentMalware.Win32.Gencirc.10b17b3c
EmsisoftGen:Variant.Mikey.64750 (B)
F-SecureHeuristic.HEUR/AGEN.1317714
DrWebTrojan.Siggen7.22024
VIPREGen:Variant.Mikey.64750
TrendMicroTROJ_LETHIC.SMT
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.b285c4c11d561f13
SophosMal/Generic-S
IkarusWorm.Win32.Dorkbot
JiangminBackdoor.Androm.pbz
WebrootW32.Adware.Gen
GoogleDetected
AviraHEUR/AGEN.1317714
VaristW32/S-1cbcf7a8!Eldorado
Antiy-AVLTrojan/Win32.Kryptik.fsjs
Kingsoftmalware.kb.a.1000
XcitiumBackdoor.Win32.Androm.AXQ@6yqacl
MicrosoftTrojan:Win32/CryptInject!pz
ViRobotTrojan.Win32.XPacker.Gen
ZoneAlarmHEUR:Worm.Win32.Oxynoxy.gen
GDataGen:Variant.Mikey.64750
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Scarsi.R199259
McAfeeTrojan-FMLV!B285C4C11D56
MAXmalware (ai score=83)
VBA32BScope.Trojan.Inject
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/CI.A
RisingTrojan.Kryptik!1.AA6F (CLASSIC)
YandexTrojan.GenAsa!f9sLCgEBBqE
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.108856127.susgen
FortinetW32/GenKryptik.ADEL!tr
BitDefenderThetaAI:Packer.FD5AF5651F
AVGWin32:Bzofiku-A [Drp]
DeepInstinctMALICIOUS
alibabacloudTrojan:Win/Kryptik.d6da519c

How to remove Trojan:Win32/CryptInject!pz?

Trojan:Win32/CryptInject!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment