About “Win32/Injector.CXHD” infection

The Win32/Injector.CXHD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.CXHD virus can do?

• Executable code extraction
• Injection (inter-process)
• Injection (Process Hollowing)
• Creates RWX memory
• Reads data out of its own binary image
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary likely contains encrypted or compressed data.
• Executed a process and injected code into it, probably while unpacking
• Installs itself for autorun at Windows startup
• Creates a copy of itself
• Collects information to fingerprint the system
• Anomalous binary characteristics

How to determine Win32/Injector.CXHD?

File Info:
crc32: A7358ACD
md5: 2e8c0b0971aff8d7e98aff55788b98b0
name: 2E8C0B0971AFF8D7E98AFF55788B98B0.mlw
sha1: 33c219338430c334c905fb77f6a69984c26dc4e2
sha256: aa775f3a985b66e1bbe60ef665dd3f332462289b3aed873e7ad244d9fe007560
sha512: deeaa1e2d376bd9984953d7b57a2784464c980b2dfcf7da810a3376133546372f7a982bb0806046d43600f308835081d941bc2efa1da034530909aba4705fa02
ssdeep: 12288:NSxDIWLr0tWDUOTT1qLJCt4nEJYq4lZCyKyErW5tVhgo9hcOdWJHJg+LPw7UAlC:NSxDIg1t40YtlZC3lW5yo9m5JgxC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0804 0x04b0
LegalCopyright: Cardif
InternalName: Jumanjj
FileVersion: 1.04.0004
CompanyName: _Connectify
LegalTrademarks: Cardif
Comments: Noon8
ProductName: Cardif
ProductVersion: 1.04.0004
FileDescription: Cardif
OriginalFilename: Jumanjj.exe

Win32/Injector.CXHD also known as:

How to remove Win32/Injector.CXHD?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.