Malware

Win32/Injector.EIHC removal tips

Malware Removal

The Win32/Injector.EIHC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Injector.EIHC virus can do?

  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Executable code extraction
  • Creates RWX memory
  • Executed a process and injected code into it, probably while unpacking
  • Anomalous binary characteristics

Related domains:

crasyhost.com

How to determine Win32/Injector.EIHC?


File Info:

crc32: 0719DBD4
md5: 6e3f59f491e2728cc39a212e590bbb94
name: greem.exe
sha1: 3b1e4f2ee8b20221a69b0ac9037d00a81cdd562f
sha256: 716baa32c12ce88b80d7a0e7ad0bfe1fa6609302d2bd97e3e4e5715a1663023c
sha512: 6df6ebe2eb3dd891fec5b95b9313c75ed2d9dc608103720401bf6df27f8e5857e0cd312f7cf074c36a5cbac49e43f4547f8e401ca88ec04faef5ec883d8c9378
ssdeep: 12288:2GUgFRmXXJZ/1/OdV9nGh8gLkk1c2Cz6Wpso:2GPOXXJlBO19gY0c21Wpso
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Injector.EIHC also known as:

MicroWorld-eScanTrojan.GenericKD.41892372
CAT-QuickHealTrojan.Crypt
McAfeeFareit-FQC!6E3F59F491E2
MalwarebytesSpyware.LokiBot
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Crypt.4!c
SangforMalware
K7AntiVirusTrojan ( 0055966c1 )
BitDefenderTrojan.GenericKD.41892372
K7GWTrojan ( 0055966c1 )
Cybereasonmalicious.ee8b20
TrendMicroTrojanSpy.Win32.LOKI.SMAD.hp
F-ProtW32/Injector.IMX
SymantecTrojan.Gen.2
APEXMalicious
AvastWin32:Trojan-gen
GDataTrojan.GenericKD.41892372
KasperskyHEUR:Trojan.Win32.Crypt.gen
AlibabaTrojan:Win32/Azorult.c0e6a050
NANO-AntivirusTrojan.Win32.Crypt.gcyxfr
RisingTrojan.Injector!1.AFE3 (CLASSIC)
Endgamemalicious (high confidence)
SophosMal/Fareit-V
ComodoMalware@#9gcplrl7y7ud
F-SecureTrojan.TR/Injector.vhtzy
DrWebTrojan.PWS.Stealer.25838
ZillyaTrojan.Injector.Win32.659025
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Fareit.gh
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.6e3f59f491e2728c
EmsisoftTrojan.GenericKD.41892372 (B)
IkarusTrojan.Inject
CyrenW32/Trojan.QLAN-7484
WebrootW32.Trojan.Gen
AviraTR/Injector.vhtzy
MAXmalware (ai score=87)
Antiy-AVLTrojan/Win32.Crypt
MicrosoftTrojan:Win32/Dynamer!rfn
ArcabitTrojan.Generic.D27F3A14
ZoneAlarmHEUR:Trojan.Win32.Crypt.gen
AhnLab-V3Win-Trojan/Delphiless.Exp
VBA32TScope.Trojan.Delf
ALYacTrojan.GenericKD.41892372
Ad-AwareTrojan.GenericKD.41892372
CylanceUnsafe
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Injector.EIHC
TrendMicro-HouseCallTrojanSpy.Win32.LOKI.SMAD.hp
YandexTrojan.Crypt!tVFnvVdxPLg
MaxSecureTrojan.Malware.10374761.susgen
FortinetW32/Injector.EHDJ!tr
BitDefenderThetaGen:NN.ZelphiF.32519.EGW@aCIXz1ki
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_60% (W)
Qihoo-360Win32/Trojan.ed1

How to remove Win32/Injector.EIHC?

Win32/Injector.EIHC removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment