Categories: Trojan

Trojan:Win32/CryptInject!pz removal guide

The Trojan:Win32/CryptInject!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/CryptInject!pz virus can do?

Sample contains Overlay data
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan:Win32/CryptInject!pz?


File Info:
name: 1F89FD2BFC7EF68BEFB4.mlwpath: /opt/CAPEv2/storage/binaries/d08601b4e83db75cb7e08ecf89662ae4f13ae3d333ed3f33f75a698db9c859e8crc32: E3255F5Dmd5: 1f89fd2bfc7ef68befb49c4e9f421265sha1: f69342940657914bd70b482703bf95136156a798sha256: d08601b4e83db75cb7e08ecf89662ae4f13ae3d333ed3f33f75a698db9c859e8sha512: 6a7504c9334706e9476472033584b51e620f4d36eea55908730f872c090639d0c15a3bad0c9f920f15a3dd8d11d623d5d59b17c1af87678cb27d9d7e324a522fssdeep: 6144:7vEKlRJwPnd5NpFzo/duwrFK179gaGzQfGtSVO2b:DEKlRJwfd5NpFyJKx9gxQOUrtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T12C445B62F948D833F6D2027197B90BBB5CBD9A38271960D7A3D42DE42A641E1B53C31Fsha3_384: f292e17f76572347f74737b9d33117a6bd13a2adb5ea720bb7ce47318a05d3d72e113b27672ccc9ce53e8eea669bcd54ep_bytes: e8fa070000e9b3fdffffff25d0614300timestamp: 2020-06-19 06:45:18
Version Info:
FileDescription: 扩展模块FileVersion: 1.1.4.0LegalCopyright: Copyright (C) 2019ProductName: 功能模块ProductVersion: 1.1.4.0Translation: 0x0804 0x04b0

Trojan:Win32/CryptInject!pz also known as:

Lionic	Trojan.Win32.Gofot.4!c
Cynet	Malicious (score: 100)
FireEye	Generic.mg.1f89fd2bfc7ef68b
Skyhigh	BehavesLike.Win32.Generic.dh
McAfee	GenericRXKR-DK!1F89FD2BFC7E
Cylance	unsafe
VIPRE	Gen:Variant.Application.Zusy.302222
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 00564e6c1 )
Alibaba	Trojan:Win32/CryptInject.ca0b3bc4
K7GW	Trojan ( 00564e6c1 )
CrowdStrike	win/malicious_confidence_100% (D)
Arcabit	Trojan.Application.Zusy.D49C8E
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent.ACCK
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Gofot.vho
BitDefender	Gen:Variant.Application.Zusy.302222
NANO-Antivirus	Trojan.Win32.Mikey.hkzruj
MicroWorld-eScan	Gen:Variant.Application.Zusy.302222
Avast	Win32:AdwareX-gen [Adw]
Tencent	Trojan.Win32.Gofot.hc
TACHYON	Trojan/W32.Gofot.267302
Sophos	Troj/Agent-BFAF
F-Secure	Heuristic.HEUR/AGEN.1320457
DrWeb	Trojan.PWS.Spy.21449
Zillya	Trojan.Agent.Win32.1343066
Emsisoft	Gen:Variant.Application.Zusy.302222 (B)
Ikarus	Trojan.Win32.Agent
Jiangmin	Trojan.Generic.fgybl
Webroot	W32.Trojan.Gen
Google	Detected
Avira	HEUR/AGEN.1320457
Antiy-AVL	Trojan/Win32.Wacatac
Kingsoft	malware.kb.a.759
Xcitium	Malware@#281u6brakwhzy
Microsoft	Trojan:Win32/CryptInject!pz
SUPERAntiSpyware	Trojan.Agent/Gen-Crypt
ZoneAlarm	HEUR:Trojan.Win32.Gofot.vho
GData	Gen:Variant.Application.Zusy.302222
Varist	W32/S-4eb9485d!Eldorado
AhnLab-V3	Trojan/Win32.Agent.R334496
VBA32	TrojanPSW.Spy
ALYac	Gen:Variant.Application.Zusy.302222
MAX	malware (ai score=78)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
Rising	Adware.AdPop!1.BEEF (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.102603623.susgen
Fortinet	W32/Agent.ACCK!tr
BitDefenderTheta	Gen:NN.ZexaE.36744.qu1@aeuaHzjj
AVG	Win32:AdwareX-gen [Adw]
DeepInstinct	MALICIOUS