Categories: Malware

Win32/Injector.CMEQ information

The Win32/Injector.CMEQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.CMEQ virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Reads data out of its own binary image
Performs some HTTP requests
Executed a process and injected code into it, probably while unpacking
Installs itself for autorun at Windows startup
Creates a hidden or system file
Creates a copy of itself
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

edgedl.me.gvt1.com

How to determine Win32/Injector.CMEQ?


File Info:
crc32: BD078D4Bmd5: e95a12dbc31059fe2090d22e56614252name: E95A12DBC31059FE2090D22E56614252.mlwsha1: eb5785dd454babadc019366b07630bb7c7e908e4sha256: 6cc3c1a08e092271b7d22f7c086cd6b6d68722b1da97926ad9d0a85ca07c07c9sha512: bea0f9dc7b8c3b3b9d685ea705c1d3ab3f7ab242ef5409f96afebf4c05f3e3fc8fd00bf488acc6d87f4ce90b4e16b16c867bc63d791ff1ebf17441706d9a13b9ssdeep: 12288:9hSU0MdLllkel16DGF2Ohgrv1hTiiClxwEpqP6VuST/bADOGHNRSAEgy994D9EYi:9hBfNlFl1KECiZl5ypmTAVBxD9zpEneItype: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Version Info:
0: [No Data]

Win32/Injector.CMEQ also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0055e4081 )
Lionic	Trojan.NSIS.Onion.mD6C
DrWeb	Trojan.Inject2.8693
Cynet	Malicious (score: 99)
CAT-QuickHeal	Ransom.Crowti.NSIS.A
ALYac	Trojan.Ransomware.GenericKD.41387641
Cylance	Unsafe
Zillya	Trojan.Injector.Win32.336108
Sangfor	Ransom.Win32.Enestedel.8
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Ransom:Win32/Onion.8bbf3e15
K7GW	Trojan ( 0055e4081 )
Cybereason	malicious.bc3105
Cyren	W32/Injector.FABF-7976
Symantec	Ransom.CTBLocker
ESET-NOD32	a variant of Win32/Injector.CMEQ
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.NSIS.Onion.anf
BitDefender	Trojan.Ransomware.GenericKD.41387641
NANO-Antivirus	Trojan.Raw.Ransom.dywvds
MicroWorld-eScan	Trojan.Ransomware.GenericKD.41387641
Tencent	Win32.Trojan.Bp-generic.Wpav
Ad-Aware	Trojan.Ransomware.GenericKD.41387641
Sophos	Troj/Ransom-BPU
Comodo	Malware@#1hxeowty7uxje
BitDefenderTheta	Gen:NN.ZedlaF.34796.fy8@aO4oYuoi
VIPRE	Trojan.Win32.Generic.pak!cobra
TrendMicro	Ransom_CRYPCTB.JJB
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dc
FireEye	Generic.mg.e95a12dbc31059fe
Emsisoft	Trojan.Ransomware.GenericKD.41387641 (B)
Webroot	Trojan.Dropper.Gen
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.1D7833B
Microsoft	Ransom:Win32/Critroni.B
Arcabit	Trojan.Ransomware.Generic.D2778679
SUPERAntiSpyware	Trojan.Agent/Gen-PWS
GData	NSIS.Trojan-Ransom.CTBLocker.W
TACHYON	Trojan/W32.Inject.984458
AhnLab-V3	Trojan/Win32.Injector.C879297
McAfee	Artemis!E95A12DBC310
MAX	malware (ai score=100)
VBA32	Hoax.Onion
Malwarebytes	Spyware.PasswordStealer
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom_CRYPCTB.JJB
Yandex	Trojan.Injector!wxllf27RRyY
Ikarus	Trojan.Win32.Injector
Fortinet	W32/TrojRansom.07C9!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Generic.HoMASOUA