Categories: Malware

About “Win32/Injector.DMQL” infection

The Win32/Injector.DMQL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.DMQL virus can do?

Executable code extraction
Network activity detected but not expressed in API logs
Mimics icon used for popular non-executable file format
Anomalous binary characteristics

How to determine Win32/Injector.DMQL?


File Info:
crc32: F6273413md5: afd32f8705872d1d129fa1f91caf1a5dname: AFD32F8705872D1D129FA1F91CAF1A5D.mlwsha1: 02e96f59c21a0ec120cd64b95c6933987d2336dbsha256: 451d32059d88916954315eb8e34c1d0a5ff95bf0f0a866173358183a40e015c6sha512: ec7bb675f24fa4abc76c2a19a2f1af903555f46ee3f4d5075b1503fb0b93c84de68d20979a4604214471e256a83f7cbf09e5efb9e32a1ed22a3e894545ed5f17ssdeep: 6144:2siIWq4YfFS6EUW5tqImAStTq/MPgh+ytCizm3k8tYpe4cgfp4AD2Ipv:2BC4YfY6/W5YICykc5zgGc+Ntype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0409 0x04b0LegalCopyright: Copyright (c) 2016 Wondershare. All rights reserved.InternalName: Wondershare FilmoraFileVersion: 7.08CompanyName: Wondershare SoftwareLegalTrademarks: Wondershare SoftwareProductName: Wondershare FilmoraProductVersion: 7.08FileDescription: Wondershare FilmoraOriginalFilename: Wondershare Filmora

Win32/Injector.DMQL also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.PonyStealer.Vm0@dCj3fKni
FireEye	Generic.mg.afd32f8705872d1d
ALYac	Gen:Heur.PonyStealer.Vm0@dCj3fKni
VIPRE	3721 Chinese Keywords (CNSMin)
BitDefender	Gen:Heur.PonyStealer.Vm0@dCj3fKni
Cybereason	malicious.705872
TrendMicro	TSPY_HPFAREIT.SM2
BitDefenderTheta	Gen:NN.ZevbaF.34634.Vm0@aCj3fKni
Cyren	W32/Kryptik.CDN.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
ClamAV	Win.Packer.VbPack-0-6334882-0
Kaspersky	Trojan.Win32.Hesv.emt
NANO-Antivirus	Trojan.Win32.Bcex.erxvog
Tencent	Malware.Win32.Gencirc.10bb26bf
Ad-Aware	Gen:Heur.PonyStealer.Vm0@dCj3fKni
Sophos	Mal/NetWire-F
F-Secure	Heuristic.HEUR/AGEN.1117877
DrWeb	BackDoor.Wirenet.144
Zillya	Trojan.Hesv.Win32.531
Invincea	ML/PE-A + Mal/NetWire-F
McAfee-GW-Edition	BehavesLike.Win32.Fareit.bt
Emsisoft	Gen:Heur.PonyStealer.Vm0@dCj3fKni (B)
Ikarus	Trojan.VB.Crypt
Jiangmin	Worm.WBNA.ceid
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1117877
Antiy-AVL	Trojan/Win32.Bcex
ZoneAlarm	Trojan.Win32.Hesv.emt
GData	Gen:Heur.PonyStealer.Vm0@dCj3fKni
Cynet	Malicious (score: 100)
AhnLab-V3	Win-Trojan/VBKrypt.RP08.X1976
VBA32	TScope.Trojan.VB
MAX	malware (ai score=88)
ESET-NOD32	a variant of Win32/Injector.DMQL
TrendMicro-HouseCall	TSPY_HPFAREIT.SM2
Rising	Trojan.Injector!1.B459 (CLASSIC)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Injector.DKSV!tr
Qihoo-360	HEUR/QVM03.0.3A86.Malware.Gen
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (D)