Malware

What is “Win32/Injector.CNIX”?

Malware Removal

The Win32/Injector.CNIX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Injector.CNIX virus can do?

  • Unconventionial language used in binary resources: Danish
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Win32/Injector.CNIX?


File Info:

crc32: 6326FE27
md5: 824012c393adf7337367786667c381f6
name: 824012C393ADF7337367786667C381F6.mlw
sha1: f41fa46a231e5a373af0bbf80ac57ec6a9636ff1
sha256: cfeee83c9275756d9a6670f12e72284ce2adba43ced3d5b31d64186a61e76350
sha512: 1f07848b84a75a755081070a7c52088b283c6a356c9b0e17285e9331959a448336d0d62b8f16ec4f8a4a9ce3e61c514c5bf1672e2dbc77041721474a0d6960d9
ssdeep: 6144:rqE7n02eSViLMIOQTaKLrtT1sgkqdUOvHBqYE6HzX:nn02e4IOQdLrtvUO/BnHL
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0406 0x04b0
InternalName: Millionare placut
FileVersion: 4.01.0006
CompanyName: AhnLabs , Inc.
ProductName: Reinigungseinlauf0
ProductVersion: 4.01.0006
FileDescription: Millionare placut
OriginalFilename: Millionare placut.exe

Win32/Injector.CNIX also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0055e3991 )
Elasticmalicious (high confidence)
DrWebTrojan.Kovter.118
CynetMalicious (score: 100)
CAT-QuickHealTrojan.VBObfuscator.GN3
ALYacGen:Heur.PonyStealer.rm1@dOMTG6fG
CylanceUnsafe
ZillyaTrojan.Kovter.Win32.951
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 0055e3991 )
Cybereasonmalicious.393adf
CyrenW32/S-8c02a139!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/Injector.CNIX
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Trojan.Agent-1361459
KasperskyTrojan.Win32.Kovter.auu
BitDefenderGen:Heur.PonyStealer.rm1@dOMTG6fG
NANO-AntivirusTrojan.Win32.Kovter.dzaiak
MicroWorld-eScanGen:Heur.PonyStealer.rm1@dOMTG6fG
TencentMalware.Win32.Gencirc.10c51dd3
Ad-AwareGen:Heur.PonyStealer.rm1@dOMTG6fG
BitDefenderThetaGen:NN.ZevbaF.34236.rm1@aOMTG6fG
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_KOVTER.SMVB2
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
FireEyeGeneric.mg.824012c393adf733
EmsisoftGen:Heur.PonyStealer.rm1@dOMTG6fG (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Kovter.dy
WebrootW32.Rogue.Gen
AviraHEUR/AGEN.1125091
Antiy-AVLTrojan/Generic.ASMalwS.15D3229
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataGen:Heur.PonyStealer.rm1@dOMTG6fG
AhnLab-V3Win-Trojan/VBKrypt.RP08.X1976
McAfeeGenericATG-FCJJ!824012C393AD
MAXmalware (ai score=89)
VBA32Trojan.Kovter
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_KOVTER.SMVB2
YandexTrojan.Kovter!qY8Y470TrvA
IkarusTrojan.Win32.Injector
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Injector.CMTN!tr
AVGWin32:Malware-gen

How to remove Win32/Injector.CNIX?

Win32/Injector.CNIX removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment