Malware

About “Win32/Injector.DCI” infection

Malware Removal

The Win32/Injector.DCI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Injector.DCI virus can do?

  • Executable code extraction
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Injector.DCI?


File Info:

crc32: 4F35E12A
md5: 7105c074e55e0642d3fd658cf8c187e1
name: 7105C074E55E0642D3FD658CF8C187E1.mlw
sha1: a284923b7b9cdbb885da339b9a57609b98a708ff
sha256: a3b25dfa0a3016a42761aefbfd7b1ec3449cf1f51eaf73ba5b2619b466c91505
sha512: a4dbe09db07d6de96d420044cb708116ee111bb6fc1f594606ed5758941dc30cf3551caf85bf4ce44734179b9d9c845546b229fc18e25050d93ff775a0352024
ssdeep: 12288:3ITvDivLk+EKKILeZZ7DSfh/UIT80O353/jMphV5TLB5MW5klU5bpY:38vDuNrV8Z7DSfWI40mPjMHTLcqyUA
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Injector.DCI also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Poison.m!c
Elasticmalicious (high confidence)
DrWebBackDoor.Poison.10339
ALYacTrojan.Crypt.Gen.1
ZillyaBackdoor.Poison.Win32.44680
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaBackdoor:Win32/Poison.a85a07a0
Cybereasonmalicious.4e55e0
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DCI
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastWin32:GenMalicious-KJJ [Trj]
CynetMalicious (score: 100)
KasperskyBackdoor.Win32.Poison.cgfo
BitDefenderTrojan.Crypt.Gen.1
NANO-AntivirusTrojan.Win32.VBInject.cyqpgp
ViRobotBackdoor.Win32.A.Poison.70932
MicroWorld-eScanTrojan.Crypt.Gen.1
TencentMalware.Win32.Gencirc.10c2c010
Ad-AwareTrojan.Crypt.Gen.1
SophosML/PE-A + Mal/Generic-E
BitDefenderThetaGen:NN.ZevbaF.34236.JqZ@aueNpwk
VIPRETrojan.Win32.Generic!BT
TrendMicroBKDR_POISON.SMUD
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.hc
FireEyeGeneric.mg.7105c074e55e0642
EmsisoftTrojan.Crypt.Gen.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminBackdoor/Poison.mcb
WebrootWorm:Win32/Rebhip
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwFH.3A541
KingsoftWin32.Hack.Poison.cg.(kcloud)
MicrosoftWorm:Win32/Rebhip
ArcabitTrojan.Crypt.Gen.1
SUPERAntiSpywareTrojan.Agent/Gen-Falcomp[Cont]
GDataTrojan.Crypt.Gen.1
AhnLab-V3Backdoor/Win32.Poison.R3405
Acronissuspicious
McAfeeGeneric VB.fq
MAXmalware (ai score=100)
VBA32BScope.Trojan.VBKrypt
PandaTrj/Genetic.gen
TrendMicro-HouseCallBKDR_POISON.SMUD
IkarusTrojan.Win32.NiGrif
MaxSecureTrojan.Malware.1705016.susgen
FortinetW32/VBKrypt.BBBQ!tr
AVGWin32:GenMalicious-KJJ [Trj]

How to remove Win32/Injector.DCI?

Win32/Injector.DCI removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment