Categories: Malware

Win32/Injector.ELBX malicious file

The Win32/Injector.ELBX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.ELBX virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Executed a process and injected code into it, probably while unpacking
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

uzoclouds.eu

How to determine Win32/Injector.ELBX?


File Info:
crc32: 61C2AF95md5: 2ae37f6ed3787816365968e9b9983a0ename: endyz.exesha1: 66f8c154ff0b19ecbcaacd677a07235504c1f266sha256: 136c2f2bd1b90d0890cee4825c70de90e062da85699ef68bd394d9149eb9fbebsha512: 65a2900768c1baee36214fa2e2c225c1a8397f4773ee2f5cc863314737222800a9e96b59a4789e1e881ba0e85f62e6a9c4b1b6146302f5b2cb601cc07b49368assdeep: 12288:HToUkEknbg77lbmW7TrKEuwf03VpIcgHur+BmWVJBSALgPD8P79MymYzF:HU+kmVmGvKEuA0LItXBdf8WgQPCyB5type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Injector.ELBX also known as:

MicroWorld-eScan	Trojan.GenericKD.33549287
Qihoo-360	HEUR/QVM05.1.F465.Malware.Gen
McAfee	Artemis!2AE37F6ED378
Malwarebytes	Spyware.LokiBot
AegisLab	Trojan.Win32.Malicious.4!c
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.33549287
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.4ff0b1
TrendMicro	TrojanSpy.Win32.LOKI.SMDF.hp
BitDefenderTheta	Gen:NN.ZelphiF.34100.TGW@ae4S@Jpi
Cyren	W32/Injector.MNDS-6512
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.ELBX
TrendMicro-HouseCall	TrojanSpy.Win32.LOKI.SMDF.hp
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-PSW.Win32.Agensla.gen
Alibaba	Trojan:Win32/DelfInject.ali2000015
Rising	Trojan.Injector!1.AFE3 (CLOUD)
Ad-Aware	Trojan.GenericKD.33549287
Emsisoft	Trojan.GenericKD.33549287 (B)
DrWeb	Trojan.Siggen9.21473
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Fareit.bh
Fortinet	W32/Injector.EDUW!tr
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.2ae37f6ed3787816
Sophos	Mal/Fareit-V
APEX	Malicious
F-Prot	W32/Injector.IZV
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D1FFEBE7
ZoneAlarm	HEUR:Trojan-PSW.Win32.Agensla.gen
Microsoft	PWS:Win32/Stimilina.E!bit
Acronis	suspicious
ALYac	Trojan.GenericKD.42852869
Cylance	Unsafe
Panda	Trj/Genetic.gen
Ikarus	Trojan.Win32.Injector
eGambit	Unsafe.AI_Score_99%
GData	Win32.Trojan.Agent.AH9S4A
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_90% (W)
MaxSecure	Trojan.Malware.300983.susgen