Categories: Malware

How to remove “Win32/Injector.ELEJ”?

The Win32/Injector.ELEJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.ELEJ virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Executed a process and injected code into it, probably while unpacking
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Creates a copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Injector.ELEJ?


File Info:
crc32: 8CA04C05md5: c7146bd7224de727acdb7ade25798581name: clip.exesha1: ca211f5a825496f5105fdfd71f052d131184a858sha256: eeb8a5be31859801d6f5fbf037403f1be3ef35b62165111f79b28cd51c681d40sha512: 9fbe0b4c8eb92f39904a7ca5c1602c8b94b3bd90f56fc50c886cacd8bbad9390da99f00bb8d2439ab91fb69af846ff3d9ecfceed01e274603ed301e2f67504bessdeep: 12288:FrlEblPV33kdjH48U/R/P2+eKgn3XT1aft1R5PI8GL:9CH33kdjqGVjHUf3YLtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Injector.ELEJ also known as:

MicroWorld-eScan	Trojan.GenericKD.42877794
FireEye	Generic.mg.c7146bd7224de727
Qihoo-360	HEUR/QVM05.1.127D.Malware.Gen
Cylance	Unsafe
BitDefender	Trojan.GenericKD.42877794
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.a82549
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZelphiF.34100.SGW@aiJC3uii
ESET-NOD32	a variant of Win32/Injector.ELEJ
TrendMicro-HouseCall	TrojanSpy.Win32.LOKI.SMDF.hp
Avast	Win32:Trojan-gen
GData	Trojan.GenericKD.42877794
Kaspersky	HEUR:Trojan-Banker.Win32.ClipBanker.gen
AegisLab	Trojan.Win32.ClipBanker.7!c
Ad-Aware	Trojan.GenericKD.42877794
Sophos	Mal/Fareit-V
F-Secure	Trojan.TR/Injector.ipxue
DrWeb	Trojan.Siggen9.23406
TrendMicro	TrojanSpy.Win32.LOKI.SMDF.hp
McAfee-GW-Edition	BehavesLike.Win32.Trojan.bh
Trapmine	malicious.high.ml.score
Emsisoft	Trojan.GenericKD.42877794 (B)
APEX	Malicious
Webroot	W32.Malware.Gen
Avira	TR/Injector.ipxue
Antiy-AVL	Trojan[Banker]/Win32.ClipBanker
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D28E4362
AhnLab-V3	Suspicious/Win.Delphiless.X2059
ZoneAlarm	HEUR:Trojan-Banker.Win32.ClipBanker.gen
Microsoft	Trojan:Win32/Wacatac.C!ml
Acronis	suspicious
McAfee	Artemis!C7146BD7224D
MAX	malware (ai score=82)
Panda	Trj/CI.A
Rising	Trojan.Injector!1.AFE3 (CLOUD)
Ikarus	Trojan.Win32.Injector
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Injector.ELDT!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)