Win32/Injector.DSBB (file analysis)

The Win32/Injector.DSBB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.DSBB virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Injector.DSBB?


File Info:
crc32: E0362866
md5: fe42ee47bfb165cf41fe3e9bbec9b8d1
name: FE42EE47BFB165CF41FE3E9BBEC9B8D1.mlw
sha1: 4f31a239bc4cb4b9d1d4a9ab0ac65b19e5c915f3
sha256: dd83b9b1c2d24dac4436b761ea8c1b050011c30850973256ab7319cb07244a73
sha512: 59068431e3b1f5dbf9846413717db01fa970284cb9c814188fa3ca01dd8f4e0188f5d2aac95787e20eb2770fe5e5f2ee66141b2684591616b8a78bcc90cad23a
ssdeep: 3072:73gjy1pkotUdLyFlQu9Xt6Xfpb8VsrWnkv96N1rbQZKW0VENERHt:Uy1CoKdyzXt6XfppT9CrEZK9N
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Katik
InternalName: Erfar
FileVersion: 4.07.0009
CompanyName: logitECH
LegalTrademarks: Wordman3
ProductName: Bluebirds4
ProductVersion: 4.07.0009
FileDescription: Volemitol
OriginalFilename: Erfar.exe

Win32/Injector.DSBB also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.PonyStealer.lm0@dOdBtyoi
FireEye	Generic.mg.fe42ee47bfb165cf
McAfee	Fareit-FJO!FE42EE47BFB1
Malwarebytes	Trojan.MalPack.VB
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.naKocTb.4!c
Sangfor	Malware
K7AntiVirus	Trojan ( 005182f71 )
BitDefender	Gen:Heur.PonyStealer.lm0@dOdBtyoi
K7GW	Trojan ( 005182f71 )
Cybereason	malicious.7bfb16
Cyren	W32/Fareit.BV.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Packer.VbPack-0-6334882-0
Kaspersky	Backdoor.Win32.Androm.ogni
NANO-Antivirus	Trojan.Win32.Nockat.etmimz
Rising	Trojan.Injector!1.B459 (CLASSIC)
Ad-Aware	Gen:Heur.PonyStealer.lm0@dOdBtyoi
Emsisoft	Gen:Heur.PonyStealer.lm0@dOdBtyoi (B)
Comodo	Malware@#2sw35llg684me
F-Secure	Heuristic.HEUR/AGEN.1128730
DrWeb	Trojan.PWS.Stealer.18836
TrendMicro	TSPY_HPFAREIT.SM2
McAfee-GW-Edition	Fareit-FJO!FE42EE47BFB1
Sophos	Mal/Generic-S + Mal/FareitVB-M
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1128730
Antiy-AVL	Trojan/Win32.Nockat
Microsoft	VirTool:Win32/VBInject.ACV!bit
Arcabit	Trojan.PonyStealer.E9D8BF
ZoneAlarm	Backdoor.Win32.Androm.ogni
GData	Gen:Heur.PonyStealer.lm0@dOdBtyoi
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Fareit.R211409
VBA32	BScope.TrojanPSW.Fareit
ALYac	Gen:Heur.PonyStealer.lm0@dOdBtyoi
MAX	malware (ai score=99)
Cylance	Unsafe
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Injector.DSBB
TrendMicro-HouseCall	TSPY_HPFAREIT.SM2
Tencent	Win32.Trojan.Nockat.Efao
Yandex	Backdoor.Androm!aIXUbXmtmvg
Ikarus	Trojan.Win32.Crypt
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Injector.EJMZ!tr
BitDefenderTheta	Gen:NN.ZevbaF.34804.lm0@aOdBtyoi
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Win32/Backdoor.5c5

How to remove Win32/Injector.DSBB?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Injector.DSBB (file analysis)