Win32/Injector.ELND malicious file

The Win32/Injector.ELND is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.ELND virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Injector.ELND?


File Info:
crc32: 6539B960
md5: 152a0a8636184f0bf33d5f855edb9803
name: az1.exe
sha1: e6b3855cb54436b95ca1747b63274ac65baf6d91
sha256: 60e4a90b0d8ac89efe92c67bdabc39b364459d7440bd435ad653d667dc57d0ad
sha512: 222c2df5ec635821254ae454c13091b5e4b90cb140d4d72f1727024df073e27b7e57723f7c9d8aa5cf92c668755d645f58cce820d4163df8e8e33f5268e7fae6
ssdeep: 768:SSlaQiksHXxkDilnxryX3Dqp/ve4Iv+LmMWiLZFWKaqs:/lM5HXxTr8Dqp/243LmMHlcKaF
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: nuli
FileVersion: 1.00
CompanyName: BlueCapped
Comments: Xmedias
ProductName: Scre
ProductVersion: 1.00
FileDescription: SEKVENSMOD
OriginalFilename: nuli.exe

Win32/Injector.ELND also known as:

MicroWorld-eScan	Trojan.GenericKD.42997956
Qihoo-360	Generic/HEUR/QVM03.0.9CE1.Malware.Gen
McAfee	RDN/Generic.grp
Cylance	Unsafe
AegisLab	Trojan.Multi.Generic.4!c
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Trojan.GenericKD.42997956
K7GW	Trojan ( 00564aa61 )
F-Prot	W32/Kryptik.BIF.gen!Eldorado
APEX	Malicious
ClamAV	Win.Trojan.VBGeneric-7670107-0
GData	Win32.Trojan-Downloader.Dagurleo.LF4THQ
Kaspersky	Backdoor.Win32.Remcos.osm
Rising	Trojan.Injector!8.C4 (CLOUD)
Emsisoft	Trojan.Injector (A)
DrWeb	Trojan.Siggen9.39357
McAfee-GW-Edition	RDN/Generic.grp
Trapmine	malicious.moderate.ml.score
Sophos	Mal/FareitVB-AA
Ikarus	Trojan.Win32.Injector
Cyren	W32/VB.RP.gen!Eldorado
Arcabit	Trojan.Generic.D29018C4
ZoneAlarm	Backdoor.Win32.Remcos.osm
Microsoft	Trojan:Win32/Dynamer!rfn
ALYac	Spyware.Infostealer.Azorult
MAX	malware (ai score=83)
Ad-Aware	Trojan.GenericKD.42997956
Malwarebytes	Trojan.MalPack.VB
ESET-NOD32	a variant of Win32/Injector.ELND
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/GuLoader.VHIH!tr
BitDefenderTheta	Gen:NN.ZevbaCO.34106.gm0@amEW!jei
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Win32/Injector.ELND?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Injector.ELND malicious file