Categories: Malware

Win32/Injector.DTEP removal

The Win32/Injector.DTEP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.DTEP virus can do?

Behavioural detection: Executable code extraction – unpacking
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Uses Windows utilities to create a scheduled task
Behavioural detection: Injection (Process Hollowing)
Behavioural detection: Injection (inter-process)
Touches a file containing cookies, possibly for information gathering
Harvests credentials from local FTP client softwares
Harvests information related to installed mail clients
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Win32/Injector.DTEP?


File Info:
name: 3ED25017FFD82C974808.mlwpath: /opt/CAPEv2/storage/binaries/2925587dd57667b54900e26eb9f047d0a2d38a67dc5edf5c3b50a0b8987351fccrc32: 74FBDA54md5: 3ed25017ffd82c9748088a4dc281ed01sha1: ceb68d34dea325c6cd6be261dd389b62bdd56e20sha256: 2925587dd57667b54900e26eb9f047d0a2d38a67dc5edf5c3b50a0b8987351fcsha512: 5a45491f3541f6587258eab2babb383c23f5f9f49589c66ba1acad68ed514f046ba2e7456cf44c5c292a7f35a3d4795e3b76d0250df281a13e3cb44cbb87be17ssdeep: 3072:qR+fHL4zSsfgkBIxIeWvj8p6p0Kck03i2jUFSO+pwL:qR+/GSs4BwT0KckcjUYBpetype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T10C14BE263598EC1DF488B23FC465E5B427903CA1C836A6CABF5B3BCE197716BD514B08sha3_384: bf0cf80c7cd4b0806605dde97143f7dd9cf97b984a6301ab57f9aeaaf430cb3abd79eaf5298cf34a930db888b4816e61ep_bytes: 6884144000e8f0ffffff000000000000timestamp: 2017-11-06 00:36:51
Version Info:
Translation: 0x0409 0x04b0FileDescription: Aobogenie.eOoLegalTrademarks: AreeoousProductName: dc saft soeFileVersion: 1.03ProductVersion: 1.03InternalName: Shootboard2OriginalFilename: Shootboard2.exe

Win32/Injector.DTEP also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Fareit.i!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.PonyStealer.mm0@cexnxxfi
FireEye	Generic.mg.3ed25017ffd82c97
McAfee	Packed-TU!3ED25017FFD8
Cylance	unsafe
VIPRE	Gen:Heur.PonyStealer.mm0@cexnxxfi
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	Trojan ( 0051b0c11 )
BitDefender	Gen:Heur.PonyStealer.mm0@cexnxxfi
K7GW	Trojan ( 0051b0c11 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.VBZenPack_Heur
Cyren	W32/Fareit.BX.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.DTEP
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	TrojanPSW:Win32/Fareit.2a8d6950
NANO-Antivirus	Trojan.Win32.Fareit.euvgbg
Rising	Trojan.Injector!1.B459 (CLASSIC)
Sophos	Mal/FareitVB-M
F-Secure	Heuristic.HEUR/AGEN.1335971
DrWeb	Trojan.PWS.Stealer.1932
Zillya	Trojan.Injector.Win32.1272107
TrendMicro	TrojanSpy.Win32.LOKI.SM.hp
McAfee-GW-Edition	BehavesLike.Win32.VBObfus.ch
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Heur.PonyStealer.mm0@cexnxxfi (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.PSW.Fareit.ptf
Avira	HEUR/AGEN.1335971
Antiy-AVL	Trojan[PSW]/Win32.Fareit
Microsoft	VirTool:Win32/VBInject.PB!bit
Xcitium	Malware@#xv36k1xfkp2j
Arcabit	Trojan.PonyStealer.E0F1D5
SUPERAntiSpyware	Trojan.Agent/Gen-VB
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Heur.PonyStealer.mm0@cexnxxfi
Google	Detected
AhnLab-V3	Win-Trojan/VBKrypt.RP02.X1828
BitDefenderTheta	Gen:NN.ZevbaF.36318.mm0@aexnxxfi
MAX	malware (ai score=100)
DeepInstinct	MALICIOUS
VBA32	TrojanPSW.Fareit
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TrojanSpy.Win32.LOKI.SM.hp
Tencent	Malware.Win32.Gencirc.13ad7b18
Yandex	Trojan.PWS.Fareit!nTWUtyDoVIU
Ikarus	Trojan.Win32.Injector
Fortinet	W32/GenKryptik.BDFG!tr
AVG	Win32:GenMalicious-NYH [Trj]
Cybereason	malicious.7ffd82
Avast	Win32:GenMalicious-NYH [Trj]