About "Win32/Injector.EMBO" infection

The Win32/Injector.EMBO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.EMBO virus can do?

Executable code extraction
Creates RWX memory
Performs some HTTP requests
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

redirector.gvt1.com

r4—sn-4g5ednss.gvt1.com

How to determine Win32/Injector.EMBO?


File Info:
crc32: 506F976D
md5: eb6dcb759139565be67e1d569b3c4ce8
name: tmp.exe
sha1: 288d472e00602f331879e89f640419c0f3f07a7c
sha256: cde6a0df507f5afb6ee704ff0a33fbe83d30bb16ea000637cb0ea8a7719afe6f
sha512: ead3685ec72c437b13d8edddf1d33cbab734aef823f6c1e63877015294aa278d3f28ff6fc81035c67edbe7a18ed8dc41a90a5447b7df315bfdfc0827547caf7e
ssdeep: 768:Bh3Qus16GI56EQBNBcfYFBKoBvOSWgXOeN5qj8aJAnriXAWqxje:fQu86GGPQDzVBmSWgXzqj5VeI
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: fakt
FileVersion: 2.06
CompanyName: Hurtinx
ProductName: REKISSGAB
ProductVersion: 2.06
FileDescription: Hurtinx
OriginalFilename: fakt.exe

Win32/Injector.EMBO also known as:

Sangfor	Malware
BitDefenderTheta	Gen:NN.ZevbaF.34122.gm0@a0RbXqci
Cyren	W32/VBKrypt.AKZ.gen!Eldorado
APEX	Malicious
Kaspersky	Trojan.Win32.Vebzenpak.rze
Sophos	Mal/FareitVB-AB
F-Secure	Trojan.TR/Injector.hieyg
McAfee-GW-Edition	BehavesLike.Win32.Trojan.nt
Trapmine	suspicious.low.ml.score
Emsisoft	Trojan.Injector (A)
F-Prot	W32/VBKrypt.AKZ.gen!Eldorado
eGambit	Unsafe.AI_Score_99%
Avira	TR/Injector.hieyg
Endgame	malicious (moderate confidence)
ZoneAlarm	Trojan.Win32.Vebzenpak.rze
Microsoft	Trojan:Win32/Wacatac.D!ml
McAfee	Fareit-FST!EB6DCB759139
Malwarebytes	Trojan.GuLoader.VB
ESET-NOD32	a variant of Win32/Injector.EMBO
Rising	Trojan.Injector!1.C6CA (CLASSIC)
Fortinet	W32/Injector.EMAU!tr
Webroot	W32.Malware.Gen
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Win32/Injector.EMBO?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Win32/Injector.EMBO” infection