Categories: Malware

About “Win32/Injector.DNDY” infection

The Win32/Injector.DNDY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.DNDY virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Reads data out of its own binary image
Installs itself for autorun at Windows startup
Creates a slightly modified copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Injector.DNDY?


File Info:
crc32: E14E6C54md5: a8a09a7e845e70eb089b0eed45d0dc77name: A8A09A7E845E70EB089B0EED45D0DC77.mlwsha1: 0a9007bf9fde1f21c388e75c2fd16b4317fd1328sha256: 18637533c53aee9c3f9b86c813ac70a6f7d1532d49a0a31ccd1875b33d07be4dsha512: 3eb6847256feabbfb2580803f586df802df8806354de2124e1ff72e9c774cbd48f52099389a70ada988c74060b21417f9fa1a61a779eb80b6b1fa6d8d31b4891ssdeep: 6144:zjctmhL3qn33gB8kIAydcxnolXnlOeZiKTpsgW+zGrSgFXUMegmpUXd/:zQtmL36Hgikpxnol1tZfCgWOWZEdpItype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0409 0x04b0LegalCopyright:  InternalName: LineFileVersion: 4.11.0002CompanyName: LINE CorporationLegalTrademarks:  Comments:  ProductName:  ProductVersion: 4.11.0002FileDescription:  OriginalFilename: Line.exe

Win32/Injector.DNDY also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.PonyStealer.Jm1@dOz6qjei
FireEye	Generic.mg.a8a09a7e845e70eb
McAfee	GenericRXDI-NC!A8A09A7E845E
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 0050a6301 )
BitDefender	Gen:Heur.PonyStealer.Jm1@dOz6qjei
K7GW	Trojan ( 0050a6301 )
Cybereason	malicious.e845e7
BitDefenderTheta	Gen:NN.ZevbaF.34804.Jm1@aOz6qjei
Symantec	W32.Spybot.Worm
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.VBKryjetor.arge
NANO-Antivirus	Trojan.Win32.VBKryjetor.evghyf
Rising	Trojan.Injector!8.C4 (CLOUD)
Ad-Aware	Gen:Heur.PonyStealer.Jm1@dOz6qjei
Emsisoft	Gen:Heur.PonyStealer.Jm1@dOz6qjei (B)
Comodo	Malware@#3bbpqliqqpe9o
F-Secure	Heuristic.HEUR/AGEN.1107770
DrWeb	Trojan.MulDrop7.50346
Zillya	Trojan.VBKryjetor.Win32.4985
TrendMicro	TrojanSpy.Win32.LOKI.SM.hp
McAfee-GW-Edition	GenericRXDI-NC!A8A09A7E845E
Sophos	ML/PE-A + Mal/FareitVB-M
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.VBKryjetor.uhp
Avira	HEUR/AGEN.1107770
Antiy-AVL	Trojan/Win32.SGeneric
Microsoft	VirTool:Win32/VBInject.OZ!bit
Arcabit	Trojan.PonyStealer.E1CAB3
ZoneAlarm	Trojan.Win32.VBKryjetor.arge
GData	Gen:Heur.PonyStealer.Jm1@dOz6qjei
Cynet	Malicious (score: 100)
AhnLab-V3	Win-Trojan/VBKrypt.RP.X1764
VBA32	Trojan.VBKryjetor
ALYac	Gen:Heur.PonyStealer.Jm1@dOz6qjei
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Injector.DNDY
TrendMicro-HouseCall	TrojanSpy.Win32.LOKI.SM.hp
Tencent	Malware.Win32.Gencirc.114950b4
Yandex	Trojan.GenAsa!qyEfXbVPiuw
Ikarus	Trojan.Win32.Injector
eGambit	PE.Heur.InvalidSig
Fortinet	W32/VBKryptik.DZUX!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (D)
Qihoo-360	HEUR/QVM03.0.B20C.Malware.Gen