About “Win32/Injector.EJTF” infection

The Win32/Injector.EJTF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Injector.EJTF virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Chinese (Traditional)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/Injector.EJTF?


File Info:
crc32: C100098D
md5: 6ba1607c918f6c42c21fe5bacff87fa2
name: 1.exe
sha1: 863e5f2f2daac267ee45e1e53e5a38f85a6b501a
sha256: 628a093d3d0a22017e738cf790d715c8abe9899fc328c338c2e1941bcbad351a
sha512: c5fce21c34b04d4992cdc8b863e0a0437d818eb2a21529085e2e301e851c93511ab8819d71c194d69dfe7da793427fadc3864715948ee66ad9f51ad9dc46f834
ssdeep: 1536:+H6GSuYQWG/guhJKOEvTx1StwH00cSuYQWG/guhJKOEvTxi6:M6EhWGYEwOMxktwNShWGYEwOMxi6
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0404 0x04b0
InternalName: Troglyt3
FileVersion: 1.00
CompanyName: lonn
ProductName: Informat4
ProductVersion: 1.00
OriginalFilename: Troglyt3.exe

Win32/Injector.EJTF also known as:

AegisLab	Trojan.Multi.Generic.4!c
Sangfor	Malware
Invincea	heuristic
ESET-NOD32	a variant of Win32/Injector.EJTF
APEX	Malicious
Paloalto	generic.ml
Kaspersky	UDS:DangerousObject.Multi.Generic
DrWeb	Trojan.Siggen9.1338
Trapmine	malicious.moderate.ml.score
Ikarus	Trojan-PSW.Agent
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	Trojan:Win32/Bomitag.D!ml
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZevbaF.33558.hm0@aCgwToab
Malwarebytes	Trojan.MalPack.VB
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_94%
CrowdStrike	win/malicious_confidence_80% (W)

How to remove Win32/Injector.EJTF?

Win32/Injector.EJTF removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X