Malware

Win32/Injector.DZZG removal instruction

Malware Removal

The Win32/Injector.DZZG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Injector.DZZG virus can do?

  • Executable code extraction
  • Unconventionial language used in binary resources: Spanish (Nicaragua)
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Injector.DZZG?


File Info:

crc32: 15EB6DD9
md5: d13ce9e5bf718423a710bbb4acf31bca
name: D13CE9E5BF718423A710BBB4ACF31BCA.mlw
sha1: cd64c70e1e58560e1db5584bace5e476f3738744
sha256: 237433211ffd02e1e29452e2773e008dda015e11e9a393e34e60c680fb99ecc4
sha512: 58051d64eebecd7066d11ddd96ac2714253dc03767f410fc4a02d4117a478e9ce7c02ffaa824b7e030f632e90f850d391ffab9e5ba17d5b0d64d2f6f6b5c33bc
ssdeep: 24576:z5imsjGqAW10KM0cvuJVIEsgqwPdzDYpbazAQK0hLFl3wO:zY1i4+KNouBA8dPkAD/
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
LegalCopyright: lungyi
InternalName: startsymbolets
FileVersion: 1.02.0005
CompanyName: huawei
LegalTrademarks: bombyxes
Comments: Fyrlaminaters
ProductName: Gibbosities3
ProductVersion: 1.02.0005
FileDescription: Prolongationernes
OriginalFilename: startsymbolets.exe

Win32/Injector.DZZG also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0053eee31 )
CynetMalicious (score: 99)
ALYacGen:Heur.PonyStealer.zn0@dy4aGrTi
CylanceUnsafe
ZillyaTrojan.GenericKD.Win32.171576
CrowdStrikewin/malicious_confidence_80% (D)
AlibabaTrojan:Win32/Injector.d34485d2
K7GWTrojan ( 0053eee31 )
Cybereasonmalicious.5bf718
CyrenW32/Injector.OE.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZZG
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Dropper.Genkryptik-7194595-0
KasperskyUDS:Worm.Win32.WBVB
BitDefenderGen:Heur.PonyStealer.zn0@dy4aGrTi
MicroWorld-eScanGen:Heur.PonyStealer.zn0@dy4aGrTi
TencentWin32.Trojan.Generic.Wnvw
Ad-AwareGen:Heur.PonyStealer.zn0@dy4aGrTi
SophosML/PE-A + Troj/Zbot-MHC
ComodoMalware@#2e2ae4mc9l84h
BitDefenderThetaGen:NN.ZevbaF.34294.zn0@ay4aGrTi
VIPRETrojan.Win32.Generic!BT
TrendMicroTrojanSpy.Win32.FAREIT.SMA.hp
McAfee-GW-EditionBehavesLike.Win32.Fareit.th
FireEyeGeneric.mg.d13ce9e5bf718423
EmsisoftGen:Heur.PonyStealer.zn0@dy4aGrTi (B)
SentinelOneStatic AI – Suspicious PE
AviraTR/Injector.vwwad
eGambitUnsafe.AI_Score_97%
MicrosoftTrojan:Win32/Occamy.C
GDataGen:Heur.PonyStealer.zn0@dy4aGrTi
AhnLab-V3Win-Trojan/VBKrypt.RP03.X1850
McAfeeFareit-FMP!D13CE9E5BF71
MAXmalware (ai score=100)
MalwarebytesTrojan.VBCrypt
PandaTrj/GdSda.A
TrendMicro-HouseCallTrojanSpy.Win32.FAREIT.SMA.hp
YandexTrojan.Injector!ypFUdkEordM
IkarusTrojan.VB.Crypt
FortinetW32/GenKryptik.CJGS!tr
AVGWin32:Trojan-gen

How to remove Win32/Injector.DZZG?

Win32/Injector.DZZG removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment