Categories: Malware

Win32/Injector.DLBD removal instruction

The Win32/Injector.DLBD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.DLBD virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Executed a process and injected code into it, probably while unpacking
Steals private information from local Internet browsers
Exhibits behavior characteristic of Pony malware
Collects information about installed applications
Harvests credentials from local FTP client softwares
Harvests information related to installed mail clients
Anomalous binary characteristics

How to determine Win32/Injector.DLBD?


File Info:
crc32: 4DABA917md5: 98afc4813ff30768d625ff05f95c7bddname: 98AFC4813FF30768D625FF05F95C7BDD.mlwsha1: ea3b3e8d4eff47a56450ae661b70d0f0a4b6ae97sha256: 67d1a8ba1ef2b9c0587be869cb25f66a800a64be803b7ef9efdb33e850449ac1sha512: 8ef2c08fa4355be6a9aed37876165d506e9849bd3ef27a6744073428a73e20e0ae436aec3252a25b504fa487adb082c6d99fdc2127d6a7fab1ef12ed942fb2ecssdeep: 3072:vVHZaPoA4/zv0VBQMIMn6BtqXRb+QlyvOzGubCFeASjVwghgV:vWPAvYCMIMn0tF6SF/type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0804 0x04b0InternalName: OxigenFileVersion: 2.04.0007CompanyName: Huawei ProductName: HeairSoftsProductVersion: 2.04.0007OriginalFilename: Oxigen.exe

Win32/Injector.DLBD also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 00504aa51 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Heur.PonyStealer.km0@nGqXHBfb
Cylance	Unsafe
Zillya	Trojan.Injector.Win32.481357
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 00504aa51 )
Cybereason	malicious.13ff30
Cyren	W32/Trojan.JZBT-8306
Symantec	Infostealer.Limitail
ESET-NOD32	a variant of Win32/Injector.DLBD
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.VBPacked6-6043264-0
BitDefender	Gen:Heur.PonyStealer.km0@nGqXHBfb
NANO-Antivirus	Trojan.Win32.VB.elnjtp
MicroWorld-eScan	Gen:Heur.PonyStealer.km0@nGqXHBfb
Ad-Aware	Gen:Heur.PonyStealer.km0@nGqXHBfb
Sophos	ML/PE-A + Mal/FareitVB-I
Comodo	Malware@#164n1emfmklmg
F-Secure	Heuristic.HEUR/AGEN.1112811
BitDefenderTheta	Gen:NN.ZevbaF.34688.km0@aGqXHBfb
VIPRE	Trojan.Win32.Generic!BT
FireEye	Generic.mg.98afc4813ff30768
Emsisoft	Gen:Heur.PonyStealer.km0@nGqXHBfb (B)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Trojan.PBKM
Avira	HEUR/AGEN.1112811
Antiy-AVL	Trojan/Win32.TSGeneric
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Dynamer!rfn
AegisLab	Trojan.Multi.Generic.4!c
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Heur.PonyStealer.km0@nGqXHBfb
AhnLab-V3	Win-Trojan/VBKrypt.RP.X1764
McAfee	VBInject-FUG!98AFC4813FF3
MAX	malware (ai score=100)
VBA32	BScope.TrojanPSW.Fareit
Panda	Trj/GdSda.A
Rising	Trojan.Dynamer!8.3A0 (CLOUD)
Yandex	Trojan.Injector!FTFuVnJQseM
Ikarus	Trojan.Win32.Injector
Fortinet	W32/Injector.DLAD!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml