What is "Win32/Injector.EJNF"?

The Win32/Injector.EJNF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.EJNF virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Injector.EJNF?


File Info:
crc32: 7FE5C2F5
md5: c84a21c32ad058f7e0541aa49b5db225
name: abcx.jpg
sha1: 62cf5402c495b51e9b5a37f409d73307401fcd08
sha256: 2ab72f95a8e9fa67c60255b7083fd6f2dd5d5ed59d43c852e66beea573ee5fe4
sha512: 20191f7508fa11dcab76db17c3b326972d50c853f2e8f992fd9c1875999e53490c1d22d6f65dff721ae5a70cfffc4904f484fdc1b7ee9fb6cb3f9496b983a6a6
ssdeep: 12288:Oy27DfK0PYIhUrFadejhlxKuOgbRdZrTXmsVXFn:n+fhP9UrhsuzJvXmsn
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: CosbrykA
FileVersion: 1.00
Comments: mITU
ProductName: FLAtvoFFIC8
ProductVersion: 1.00
OriginalFilename: CosbrykA.exe

Win32/Injector.EJNF also known as:

FireEye	Generic.mg.c84a21c32ad058f7
Malwarebytes	Trojan.MalPack.VB
Sangfor	Malware
Cybereason	malicious.2c495b
F-Prot	W32/Kryptik.AVA.gen!Eldorado
APEX	Malicious
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.VBObfus.tt
Cyren	W32/Kryptik.AVA.gen!Eldorado
Endgame	malicious (high confidence)
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Acronis	suspicious
ESET-NOD32	a variant of Win32/Injector.EJNF
SentinelOne	DFI – Malicious PE
Fortinet	W32/Injector.EADX!tr

How to remove Win32/Injector.EJNF?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Win32/Injector.EJNF”?