Categories: Malware

Win32/Injector.BDGK removal tips

The Win32/Injector.BDGK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.BDGK virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Executed a process and injected code into it, probably while unpacking
Anomalous binary characteristics

Related domains:

iphanyi.duckdns.org

How to determine Win32/Injector.BDGK?


File Info:
crc32: C36743C9md5: d0e7b058e35b998134e771b24f534b07name: upload_filesha1: 9711b4478564484da540866df48c117f9d96fd4fsha256: 249e738650027df7635aa70373e2e2f936eb58e1a208fdc8df9ee2f66e4cb9e3sha512: 7f1b2c67f375a6225754a65eba3bcaed355672553265d70e16c0da4fbbd81c27a07d728f4cfccb1458a7d75061aa8b0d562db8e0f58fb03b82fdd671534ad506ssdeep: 12288:pMEuFTG5ys/bVmOQEXrsZVA+m2WwlJD3RDBs4mx98Ad1iMCDp:eEX5yUxrHrDqRYxd1E9type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0409 0x04b0LegalCopyright: SubZero DeZignsInternalName: CheckerFileVersion: 2.00CompanyName: SubZero DeZignsLegalTrademarks: Mini SubComments: This file is used for checking dll ocx files.ProductName: DLL OCX Checker.ProductVersion: 2.00FileDescription: SubZero's Mini Sub DLL OCX Checker.OriginalFilename: Checker.exe

Win32/Injector.BDGK also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.34376929
FireEye	Generic.mg.d0e7b058e35b9981
CAT-QuickHeal	Trojan.Multi
McAfee	GenericRXLS-GH!D0E7B058E35B
Cylance	Unsafe
AegisLab	Trojan.Win32.NetWire.4!c
K7AntiVirus	Trojan ( 0049a6ee1 )
BitDefender	Trojan.GenericKD.34376929
K7GW	Trojan ( 0049a6ee1 )
Cybereason	malicious.785644
TrendMicro	PUA.Win32.Wacatac.USXVPHI20
BitDefenderTheta	Gen:NN.ZevbaF.34196.Um3@aacHmjci
Cyren	W32/Trojan.MCPB-6215
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	PUA.Win32.Wacatac.USXVPHI20
Paloalto	generic.ml
Kaspersky	Trojan.Win32.NetWire.jpv
Alibaba	Trojan:Win32/NetWire.458ed74d
Rising	Trojan.Injector!8.C4 (CLOUD)
Ad-Aware	Trojan.GenericKD.34376929
Comodo	TrojWare.Win32.Genome.xfcee@0
F-Secure	Trojan.TR/Injector.lyrxe
VIPRE	Trojan.Win32.Generic!BT
Sophos	Mal/Generic-S
APEX	Malicious
Avira	TR/Injector.lyrxe
Microsoft	Trojan:Win32/Ymacco.AA24
Arcabit	Trojan.Generic.D20C8CE1
ViRobot	Trojan.Win32.Z.Injector.763118
ZoneAlarm	Trojan.Win32.NetWire.jpv
GData	Trojan.GenericKD.34376929
Cynet	Malicious (score: 85)
AhnLab-V3	Unwanted/Win32.Agent.C4182666
VBA32	Trojan.NetWire
ALYac	Backdoor.RAT.Netwire
MAX	malware (ai score=87)
Malwarebytes	Trojan.MalPack.VB
Ikarus	Trojan.VB.Crypt
ESET-NOD32	a variant of Win32/Injector.BDGK.gen
Tencent	Win32.Trojan.Netwire.Wrqd
SentinelOne	DFI – Malicious PE
Fortinet	W32/Injector.DAJK!tr
AVG	Win32:DropperX-gen [Drp]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Trojan.fda