Should I remove “Win32/Injector.CGFC”?

The Win32/Injector.CGFC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Injector.CGFC virus can do?

Executable code extraction
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/Injector.CGFC?


File Info:
crc32: 5C799249
md5: 28e17653b86af1b6a3dcc1ebc3a9c091
name: steam.exe
sha1: 221725366b9e0ae2bf71d6a6e35a64fcbe4086fb
sha256: 6f12e51c9a283776009f36866fa81b892655fd54b442491928fcb810ec2ec202
sha512: 5dfe5c98be0261eada739a4e314bdc6459af9b583a403c5565f25a4b0711133b4b320c7a6ffabd2e657e851d5877ffebd325792ec55aa0ee865e44956103e3fd
ssdeep: 1536:lhKGYUQ8jm4mv8IH/ekd2IoPG0/XUiOFCPx5AExmqVslggiTGd2ItnKH2+zZEx:Dzjo5mkfuYGx8igiTGd2ItnKH2+zK
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: steam
FileVersion: 2.00.0023
CompanyName: Motorola update service.
ProductName: Updater
ProductVersion: 2.00.0023
OriginalFilename: steam.exe

Win32/Injector.CGFC also known as:

Bkav	W32.AIDetectVM.malware1
FireEye	Generic.mg.28e17653b86af1b6
Qihoo-360	Win32/Trojan.5b0
McAfee	Artemis!28E17653B86A
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 0056a4d31 )
BitDefender	Trojan.GenericKD.43462801
Cybereason	malicious.66b9e0
BitDefenderTheta	Gen:NN.ZevbaF.34134.im0@aKWmXsgi
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Trojan-gen
Cynet	Malicious (score: 85)
GData	Trojan.GenericKD.43462801
Kaspersky	HEUR:Trojan.Win32.VBKryjetor.vho
Alibaba	Trojan:Win32/Injector.7b59167b
MicroWorld-eScan	Trojan.GenericKD.43462801
Rising	Trojan.Injector!8.C4 (CLOUD)
Endgame	malicious (high confidence)
Emsisoft	Trojan.GenericKD.43462801 (B)
Comodo	Malware@#2o8rnf4nt91jg
F-Secure	Trojan.TR/Injector.hjrfo
TrendMicro	TROJ_GEN.R011C0RGA20
Sophos	Mal/VB-GI
Ikarus	Trojan.Win32.Injector
Avira	TR/Injector.hjrfo
Antiy-AVL	Trojan/Win32.VBKryjetor
Microsoft	Trojan:Win32/Ymacco.AA6F
Arcabit	Trojan.Generic.D2973091
ZoneAlarm	HEUR:Trojan.Win32.VBKryjetor.vho
ALYac	Trojan.GenericKD.43462801
MAX	malware (ai score=86)
Ad-Aware	Trojan.GenericKD.43462801
ESET-NOD32	a variant of Win32/Injector.CGFC
TrendMicro-HouseCall	TROJ_GEN.R011C0RGA20
Tencent	Win32.Trojan.Vbkryjetor.Hufx
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/VBKryjetor.GI!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)
MaxSecure	Trojan.Malware.300983.susgen

How to remove Win32/Injector.CGFC?

Win32/Injector.CGFC removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X