Win32/Injector.DHJR removal tips

The Win32/Injector.DHJR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.DHJR virus can do?

Presents an Authenticode digital signature
Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Creates a slightly modified copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Injector.DHJR?


File Info:
crc32: 3328DA14
md5: aea383a0567f5f95aba618d6ccc03b36
name: AEA383A0567F5F95ABA618D6CCC03B36.mlw
sha1: 71976feb1db6d908d153b58f8eece5fae6b157c2
sha256: 475dafe73a46bd8d501753383e1e3cd9ef5284832ca6133f7b5b80b7f6bcd9c5
sha512: 41e25d4409fa188913127d1500ce0778a12e6ef0eaa7635d79b8230e09666b8a29819c83930972330b7efafdafda207da43c6451ad06e5f264642c4f9837e36f
ssdeep: 12288:tnzHcMHESf1Ai4y1zasdVgcQzH2UHESf1A6IIzgezDewL07Qg1Vmy4Ccr:tzLV9AMuDcy1V9AQgooh1cFCy
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: Trince
FileVersion: 1.01.0006
CompanyName: HoFAectifys
Comments: Junctional3
ProductName: Distilland
ProductVersion: 1.01.0006
FileDescription: Hilton Hotels
OriginalFilename: Trince.exe

Win32/Injector.DHJR also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.PonyStealer.zo2@e0BYtQii
FireEye	Generic.mg.aea383a0567f5f95
CAT-QuickHeal	Trojan.MSIL
Qihoo-360	HEUR/QVM03.0.3967.Malware.Gen
McAfee	Fareit-FHG!AEA383A0567F
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
BitDefender	Gen:Heur.PonyStealer.zo2@e0BYtQii
Cybereason	malicious.0567f5
TrendMicro	TSPY_HPFAREIT.SME
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Dropper.NetWire-7724399-0
Kaspersky	Trojan.MSIL.Crypt.dfml
Rising	Trojan.Injector!1.B459 (CLASSIC)
Ad-Aware	Gen:Heur.PonyStealer.zo2@e0BYtQii
Emsisoft	Gen:Heur.PonyStealer.zo2@e0BYtQii (B)
F-Secure	Heuristic.HEUR/AGEN.1113477
DrWeb	Trojan.DownLoader35.12902
Invincea	ML/PE-A
McAfee-GW-Edition	Fareit-FHG!AEA383A0567F
Jiangmin	Trojan.MSIL.rmin
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1113477
MAX	malware (ai score=84)
Antiy-AVL	Trojan/MSIL.Crypt
Microsoft	Trojan:Win32/Wacatac.C!ml
Arcabit	Trojan.PonyStealer.E6BCF4
ZoneAlarm	Trojan.MSIL.Crypt.dfml
GData	Gen:Heur.PonyStealer.zo2@e0BYtQii
Cynet	Malicious (score: 85)
AhnLab-V3	Win-Trojan/VBKrypt.RP.X1764
BitDefenderTheta	Gen:NN.ZevbaF.34590.zo2@a0BYtQii
ALYac	Gen:Heur.PonyStealer.zo2@e0BYtQii
VBA32	TScope.Trojan.VB
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Injector.DHJR
TrendMicro-HouseCall	TSPY_HPFAREIT.SME
Yandex	Trojan.Crypt!/KcwTfpMoZA
SentinelOne	Static AI – Malicious PE
Fortinet	W32/GenKryptik.DPDX!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_80% (D)
MaxSecure	Trojan.Malware.11003490.susgen

How to remove Win32/Injector.DHJR?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Injector.DHJR removal tips