Win32/Injector.EJBK information

The Win32/Injector.EJBK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Win32/Injector.EJBK virus can do?

• Executable code extraction
• Creates RWX memory
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Deletes its original binary from disk
• Creates a copy of itself
• Attempts to interact with an Alternate Data Stream (ADS)
• Anomalous binary characteristics

How to determine Win32/Injector.EJBK?

File Info:
crc32: 283161B0md5: ba294cd490cae0ec4c817b13905103c6name: loki7.txtsha1: a2a8593bc1f65ab1dafc17aee917c06c6e2024a3sha256: 6f9fb837767dfa4a942fb1c56afba40c29019d0125f2572d45bf15cb175b165esha512: 3469ea44a003fb3f62a21cf16c6587106b82ada68a5e036e1b0b8cf5bbdb27f9cf99bea98011411835266b9c3e68bac5c085b777fb1187bf0e79960e4171284cssdeep: 6144:0JA7uPw1+51Tt3kaBdDNtYijB6Ndf7UON3A9JWoY:0JM1+d3kaBdDvYvpQ9Motype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
0: [No Data]

Win32/Injector.EJBK also known as:

MicroWorld-eScan	Gen:Variant.Symmi.93889
FireEye	Generic.mg.ba294cd490cae0ec
CAT-QuickHeal	Trojan.Kryptik
McAfee	Artemis!BA294CD490CA
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan ( 0055bffa1 )
BitDefender	Gen:Variant.Symmi.93889
K7GW	Trojan ( 0055bffa1 )
CrowdStrike	win/malicious_confidence_60% (W)
TrendMicro	TrojanSpy.Win32.LOKI.SMAD1.hp
BitDefenderTheta	Gen:NN.ZelphiF.32253.rmGfa0uq2jii
F-Prot	W32/Injector.IOW
Symantec	Trojan Horse
APEX	Malicious
Paloalto	generic.ml
GData	Gen:Variant.Symmi.93889
Kaspersky	HEUR:Trojan.Win32.Kryptik.gen
Alibaba	Trojan:Win32/Injector.9f464df2
Rising	PUF.InstallCore!8.8B (TFE:5:Q1cmzwBqmaI)
Ad-Aware	Gen:Variant.Symmi.93889
F-Secure	Trojan.TR/Injector.mpclf
McAfee-GW-Edition	BehavesLike.Win32.Fareit.dc
Trapmine	malicious.high.ml.score
Sophos	Mal/Fareit-V
Ikarus	Trojan.Agent
Cyren	W32/Injector.CWOI-2362
Jiangmin	Trojan.Kryptik.zc
Avira	TR/Injector.mpclf
Endgame	malicious (moderate confidence)
Arcabit	Trojan.Symmi.D16EC1
ZoneAlarm	HEUR:Trojan.Win32.Kryptik.gen
Microsoft	Trojan:Win32/Lokibot.CS!MTB
AhnLab-V3	Win-Trojan/Delphiless.Exp
Acronis	suspicious
ALYac	Gen:Variant.Symmi.93889
MAX	malware (ai score=82)
Cylance	Unsafe
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Injector.EJBK
TrendMicro-HouseCall	TrojanSpy.Win32.LOKI.SMAD1.hp
Fortinet	W32/Agent.AJFK!tr
AVG	FileRepMalware
Cybereason	malicious.bc1f65
Qihoo-360	Win32/Trojan.469

How to remove Win32/Injector.EJBK?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.