Malware

Win32/Injector.EKLQ information

Malware Removal

The Win32/Injector.EKLQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Injector.EKLQ virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Win32/Injector.EKLQ?


File Info:

crc32: 1C89E5F3
md5: 177e37dfad1dd26c550861b14012462a
name: major.exe
sha1: d8f1b4fec695453adc455db267fb880127e0e8b3
sha256: fa9e1153393a26c08684ba228cd70138ca1419812e5a863388be5b0f652e8107
sha512: 0ff6b67400268c1fb4959705ec4110e2db9e021d7d0f32fb65cf38636e81fe7478167ef43c607953ca787999cc5439332ef45a3ca2edb3826e0b87ddcfcecd9d
ssdeep: 768:ZtyzgmB7G+C8yNe0hPB5qXgmT/JdfFwGfwsW1:Hyzu+W9hPB51a/DOj1
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
InternalName: DDVGTE
FileVersion: 1.00
CompanyName: Hebdom6
ProductName: UNAMICAB
ProductVersion: 1.00
OriginalFilename: DDVGTE.exe

Win32/Injector.EKLQ also known as:

MicroWorld-eScanGen:Heur.PonyStealer.em0@o8G@sGai
McAfeeFareit-FRL!177E37DFAD1D
SangforMalware
BitDefenderGen:Heur.PonyStealer.em0@o8G@sGai
F-ProtW32/Injector.YP.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.EKLQ
APEXMalicious
Ad-AwareGen:Heur.PonyStealer.em0@o8G@sGai
EmsisoftGen:Heur.PonyStealer.em0@o8G@sGai (B)
DrWebTrojan.PackedENT.133
FortinetW32/Injector.EKLH!tr
Trapminesuspicious.low.ml.score
FireEyeGen:Heur.PonyStealer.em0@o8G@sGai
CyrenW32/Injector.YP.gen!Eldorado
MAXmalware (ai score=84)
ArcabitTrojan.PonyStealer.ED142DD
BitDefenderThetaGen:NN.ZevbaF.34084.em0@a8G@sGai
ALYacGen:Heur.PonyStealer.em0@o8G@sGai
GDataGen:Heur.PonyStealer.em0@o8G@sGai
MaxSecureTrojan.Malware.300983.susgen

How to remove Win32/Injector.EKLQ?

Win32/Injector.EKLQ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment