Win32/Injector.AJOX (file analysis)

The Win32/Injector.AJOX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Injector.AJOX virus can do?

Executable code extraction
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/Injector.AJOX?


File Info:
crc32: C174BA73
md5: 00bc33ed2d8d475658b723988cf2df8e
name: 00BC33ED2D8D475658B723988CF2DF8E.mlw
sha1: 1dd4a856f46a9c6aa3f019eeb17cc82a106b3a73
sha256: fb772d1a423e232187f47487086e71f11521ef19caad1c0fec9b607aae5c4461
sha512: 9c8c1b743aa4c05cc2637fcddf6a2a215b34b610269e704fbcb8385e689a60fff40cc65731b6bfd23f337071303e0bc645553f62b585b817018be307d0797663
ssdeep: 768:vnbtxtkSoqZotMD2rCVv/rzTuu/W+WwjMM:vbtxtjqtMPvSuPy
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: 0000000000
FileVersion: 1.00
CompanyName:  innov
ProductName: Project1
ProductVersion: 1.00
OriginalFilename: 0000000000.exe

Win32/Injector.AJOX also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Razy.611068
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:Win32/Injector.8c6efdaf
Cybereason	malicious.d2d8d4
ESET-NOD32	a variant of Win32/Injector.AJOX
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Trojan.Win32.VB.drfw
BitDefender	Gen:Variant.Razy.611068
MicroWorld-eScan	Gen:Variant.Razy.611068
Ad-Aware	Gen:Variant.Razy.611068
Sophos	ML/PE-A
BitDefenderTheta	AI:Packer.A362A22621
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R067C0WER21
McAfee-GW-Edition	BehavesLike.Win32.Fareit.nt
FireEye	Generic.mg.00bc33ed2d8d4756
Emsisoft	Gen:Variant.Razy.611068 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Dropper.Gen
eGambit	Unsafe.AI_Score_96%
Microsoft	Trojan:Win32/Woreflint.A!cl
Arcabit	Trojan.Razy.D952FC
ZoneAlarm	Trojan.Win32.VB.drfw
GData	Gen:Variant.Razy.611068
AhnLab-V3	Trojan/Win32.Inject.C826150
McAfee	Artemis!00BC33ED2D8D
MAX	malware (ai score=82)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R067C0WER21
Rising	Trojan.Occamy!8.F1CD (CLOUD)
Ikarus	Trojan.Win32.Injector
Fortinet	W32/Injector.DZLM!tr
AVG	Win32:Trojan-gen

How to remove Win32/Injector.AJOX?

Win32/Injector.AJOX removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X