Should I remove "Win32/Injector.EJST"?

The Win32/Injector.EJST is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.EJST virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Chinese (Traditional)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Injector.EJST?


File Info:
crc32: 021CED60
md5: be5c1ba3a95fc327f56bb9a433622178
name: lime.txt
sha1: 3c346d61468f03371afac10ffd04eb1308136185
sha256: 11db3656ef773f6c6063433f936f52cba6bc94d15a80839344531dee59716fde
sha512: c45911ba1a9ec933070d7b128a86e297184590500df3c3d877adb1e5c1f670cd3ded57d04eb0ff3698e374e52be54c7b98da51cf99b0879cdbe6a1fe26bf5082
ssdeep: 1536:QsZ4K9leZcuOtfOEvTxG0vcT9dB4K9leZcuOtfOEvTx2t:QsZ4KGZYtfOMxTvqdB4KGZYtfOMx2t
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0404 0x04b0
InternalName: VORAGO
FileVersion: 1.00
CompanyName: videO
ProductName: Festta6
ProductVersion: 1.00
OriginalFilename: VORAGO.exe

Win32/Injector.EJST also known as:

MicroWorld-eScan	Gen:Variant.Razy.597816
Sangfor	Malware
BitDefender	Gen:Variant.Razy.597816
Arcabit	Trojan.Razy.D91F38
ESET-NOD32	a variant of Win32/Injector.EJST
Paloalto	generic.ml
Kaspersky	UDS:DangerousObject.Multi.Generic
Emsisoft	Gen:Variant.Razy.597816 (B)
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Rontokbro.cm
Trapmine	malicious.high.ml.score
FireEye	Gen:Variant.Razy.597816
SentinelOne	DFI – Suspicious PE
MAX	malware (ai score=88)
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Acronis	suspicious
Ad-Aware	Gen:Variant.Razy.597816
eGambit	Unsafe.AI_Score_68%
GData	Gen:Variant.Razy.597816
BitDefenderTheta	Gen:NN.ZevbaF.33558.hm0@aK!fZOmb
AVG	FileRepMalware
Avast	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Generic/Trojan.1b9

How to remove Win32/Injector.EJST?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Win32/Injector.EJST”?