Malware

Win32/Injector.EKUU removal guide

Malware Removal

The Win32/Injector.EKUU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Injector.EKUU virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine Win32/Injector.EKUU?


File Info:

crc32: 018F21B7
md5: 018c5cd1d1a638c982398b711a06522d
name: postback_e.exe
sha1: 7ac06e363e77030da6599ab34e7e42dc2197afc9
sha256: 736a695b33998a16b5c27f761f0636d74945c2630ed2efad1bfac2677505e1dd
sha512: b1023886970f74362e675cd7a8ebca099bfc267ec077c7f243ccb873bec333341b957b4ddc003ab800dcc01dc7f400ffcbcff72ef474f50c6a082dbd3290d592
ssdeep: 768:4jtt1TFukv/dwkUJDodI2FZXLlh7PetWIOdg1WnkZh:MhukukGodI2FZ7ytAEh
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
ProductVersion: 1.00
InternalName: COAC
FileVersion: 1.00
OriginalFilename: COAC.exe
ProductName: Lassnon

Win32/Injector.EKUU also known as:

MicroWorld-eScanTrojan.GenericKD.33433933
FireEyeTrojan.GenericKD.33433933
McAfeeFareit-FRM!018C5CD1D1A6
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.GenericKD.33433933
K7GWRiskware ( 0040eff71 )
TrendMicroTrojanSpy.Win32.FAREIT.SMTHD.hp
BitDefenderThetaGen:NN.ZevbaF.34096.em0@aujorhmi
F-ProtW32/Kryptik.BDQ.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Trojan.VBGeneric-7602504-0
GDataTrojan.GenericKD.33433933
KasperskyTrojan.Win32.Vebzenpak.eop
AlibabaTrojan:Win32/Vebzenpak.cbe311da
NANO-AntivirusTrojan.Win32.Vebzenpak.hdkxwc
AegisLabTrojan.Multi.Generic.4!c
RisingTrojan.Injector!8.C4 (CLOUD)
Endgamemalicious (high confidence)
SophosMal/FareitVB-W
McAfee-GW-EditionFareit-FRM!018C5CD1D1A6
Trapminemalicious.high.ml.score
EmsisoftTrojan.GenericKD.33433933 (B)
IkarusTrojan.VB.Crypt
CyrenW32/Kryptik.BDQ.gen!Eldorado
JiangminTrojan.Vebzenpak.alo
MAXmalware (ai score=86)
Antiy-AVLTrojan/Win32.Vebzenpak
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.Generic.D1FE294D
ZoneAlarmTrojan.Win32.Vebzenpak.eop
ALYacTrojan.GenericKD.33433933
VBA32TScope.Trojan.VB
MalwarebytesTrojan.MalPack.VB.Generic
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Injector.EKUU
TrendMicro-HouseCallTrojanSpy.Win32.FAREIT.SMTHD.hp
TencentWin32.Trojan.Vebzenpak.Dlc
FortinetW32/Injector.EKUN!tr
Ad-AwareTrojan.GenericKD.33433933
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_60% (W)
Qihoo-360Generic/Trojan.ff0

How to remove Win32/Injector.EKUU?

Win32/Injector.EKUU removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment