Win32/Injector.ELGD malicious file

The Win32/Injector.ELGD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.ELGD virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Injector.ELGD?


File Info:
crc32: 02647DCF
md5: b7dd9ec6822e25172d19f7c537f20916
name: black.exe
sha1: c248864b16b7e56119675c20e37562b1c701bd10
sha256: e60807fbf4c0191dcca332ba7a7886bec872472e3d5dfc6cb9cba39b6c4f6322
sha512: 54cac18558bcc5651a33cd71c02ce36cf5842444215186c64ade0112e991460ca88ecb9e92440f09f0119da909c7a533f761cf7854f96c7863620eaedac2bc96
ssdeep: 1536:tI9CoII9tM4UwVICiXvmqT2yHVeVrlJNDDDD2hpDDDD3jsGpDDDDDDDDDDDDDDD:tCVI3j9Xb2yHVetl0n6TxuHJ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: SERRULATE
FileVersion: 1.00
CompanyName: ANANAS
Comments: ANANAS
ProductName: belongsraa
ProductVersion: 1.00
FileDescription: Liqui
OriginalFilename: SERRULATE.exe

Win32/Injector.ELGD also known as:

Bkav	W32.AIDetectVM.malware2
DrWeb	Trojan.Siggen9.26691
MicroWorld-eScan	Trojan.GenericKD.33569196
Qihoo-360	Win32/Trojan.822
CrowdStrike	win/malicious_confidence_80% (W)
BitDefender	Trojan.GenericKD.33569196
K7GW	Trojan ( 005636b71 )
K7AntiVirus	Trojan ( 005636b71 )
BitDefenderTheta	Gen:NN.ZevbaF.34104.jm0@aOP2tBji
F-Prot	W32/Kryptik.BIF.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
GData	Win32.Trojan-Downloader.Dagurleo.IL02HG
Kaspersky	Trojan.Win32.Vebzenpak.key
AegisLab	Trojan.Win32.Vebzenpak.4!c
Tencent	Win32.Trojan.Vebzenpak.Piaf
Ad-Aware	Trojan.GenericKD.33569196
Sophos	Troj/Zbot-OQV
McAfee-GW-Edition	BehavesLike.Win32.Fareit.ct
Trapmine	malicious.moderate.ml.score
Emsisoft	Trojan.GenericKD.33569196 (B)
Ikarus	Trojan.VB.Crypt
Cyren	W32/Kryptik.BIF.gen!Eldorado
Arcabit	Trojan.Generic.D20039AC
ZoneAlarm	Trojan.Win32.Vebzenpak.key
Microsoft	Trojan:Win32/Wacatac.C!ml
Acronis	suspicious
McAfee	Artemis!B7DD9EC6822E
MAX	malware (ai score=81)
Malwarebytes	Trojan.GuLoader
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Injector.ELGD
Rising	Trojan.Injector!8.C4 (CLOUD)
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/ELGD!tr
AVG	FileRepMalware

How to remove Win32/Injector.ELGD?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Injector.ELGD malicious file