Win32/Injector.BOLR information

Malware Removal

The Win32/Injector.BOLR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Win32/Injector.BOLR virus can do?

  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Arabic (Egypt)
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • Sniffs keystrokes
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine Win32/Injector.BOLR?


File Info:

crc32: F932C8A8
md5: c4003c548bc2fe299900cfd55c207286
name: C4003C548BC2FE299900CFD55C207286.mlw
sha1: f0bce7218f33abb47be0e6f91ea4a9593af4d78f
sha256: 74fe214e7308ce454a5aa33d73aecf57ea75d568c611bcf572e4da25be64f130
sha512: a85e50c6b04e6791000bd39baa0ee53c57b9647ecb24084e0f16c32dde426a0dbbe97d773f60ca03ee780cabca1ed1b59d35ac8ddaec747bddc4b4de1ebc32e7
ssdeep: 12288:n0zJQeyyDEuD+QiHOT+ZfvyZmy27SWyNkbehGG1jhNbfAx/Bx:ny51Ey+QiOIfa9ANyh17fe
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Injector.BOLR also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0055e3991 )
Elasticmalicious (high confidence)
DrWebWin32.HLLW.Autoruner2.16845
CynetMalicious (score: 100)
ALYacGen:Variant.Zusy.109927
CylanceUnsafe
ZillyaTrojan.Foreign.Win32.46736
SangforTrojan.Win32.Save.a
AlibabaRansom:Win32/Foreign.7af896b3
K7GWTrojan ( 0055e3991 )
Cybereasonmalicious.48bc2f
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.BOLR
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Ransom.Win32.Foreign.lalr
BitDefenderGen:Variant.Zusy.109927
NANO-AntivirusTrojan.Win32.RiskGen.dwpayb
MicroWorld-eScanGen:Variant.Zusy.109927
TencentWin32.Trojan.Foreign.Suwu
Ad-AwareGen:Variant.Zusy.109927
ComodoMalware@#21bv64zlbdawr
F-SecureHeuristic.HEUR/AGEN.1128416
BitDefenderThetaGen:NN.ZelphiF.34670.PGW@a0gC6RmG
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Worm.jh
FireEyeGeneric.mg.c4003c548bc2fe29
EmsisoftGen:Variant.Zusy.109927 (B)
SentinelOneStatic AI – Suspicious PE
AviraHEUR/AGEN.1128416
Antiy-AVLTrojan[Ransom]/Win32.Foreign
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftBackdoor:MSIL/Bladabindi.AJ
ArcabitTrojan.Zusy.D1AD67
AegisLabTrojan.Win32.Foreign.j!c
ZoneAlarmTrojan-Ransom.Win32.Foreign.lalr
GDataGen:Variant.Zusy.109927
AhnLab-V3Malware/Win32.Generic.C598292
McAfeeArtemis!C4003C548BC2
MAXmalware (ai score=87)
VBA32TScope.Trojan.Delf
MalwarebytesMachineLearning/Anomalous.96%
PandaTrj/CI.A
RisingRansom.Foreign!8.292 (CLOUD)
YandexTrojan.Foreign!1XsNqA2vk7U
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Foreign.FCQY!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Foreign.HgIASOQA

How to remove Win32/Injector.BOLR?

Win32/Injector.BOLR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment