Win32/Injector.EMID malicious file

The Win32/Injector.EMID is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.EMID virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Malayalam
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Injector.EMID?


File Info:
crc32: B49C4454
md5: a2a9af51271808f37748c7f31a4a999f
name: A2A9AF51271808F37748C7F31A4A999F.mlw
sha1: 10185029933c02f0b4906e7095154ea109b30241
sha256: 87bc4be707dcc8baa84f7c07543d464fc0da73b2be27bfbf814b179c05ebfbfb
sha512: 17d1c244c23c8cbf2d2a29065fa832e8c29e680ba9133a39922e48cb0f92ca898b7768e272bd0321db0a815ee4943445eaaccae91bdab4e56b326cac5621d145
ssdeep: 6144:vDhqe0E073Cwk2E6wm9bux+RpDtDtFl6RL72FNzny75rawv:v9v0E073Cw+6wqwyphTlSiNzy75rhv
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Paul Bahlawan April 2003
InternalName: Hexsweeper
FileVersion: 1.00.0023
CompanyName: Minesweeper Inc.
ProductName: HexSweeper
ProductVersion: 1.00.0023
FileDescription:  Minesweeper with its hexagonal tiles. Uses a subrutine recursively to clear out open areas and transperant BitBlt to draw the tiles
OriginalFilename: Hexsweeper.exe

Win32/Injector.EMID also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader33.43199
MicroWorld-eScan	Trojan.GenericKDZ.67272
ALYac	Trojan.GenericKDZ.67272
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
CrowdStrike	win/malicious_confidence_90% (D)
BitDefender	Trojan.GenericKDZ.67272
K7GW	Trojan ( 005669b91 )
K7AntiVirus	Trojan ( 005677851 )
BitDefenderTheta	Gen:NN.ZevbaF.34590.Bm1@aO@r2HbO
Cyren	W32/Trickbot.DY.gen!Eldorado
APEX	Malicious
Avast	Win32:BankerX-gen [Trj]
Kaspersky	Trojan.Win32.Mansabo.evh
NANO-Antivirus	Trojan.Win32.TrickBot.hkykgp
Ad-Aware	Trojan.GenericKDZ.67272
Sophos	Mal/Trickbot-I
Comodo	TrojWare.Win32.TrickBot.ADF@8s4jlf
F-Secure	Heuristic.HEUR/AGEN.1134711
Zillya	Trojan.Mansabo.Win32.1790
Invincea	ML/PE-A + Mal/Trickbot-I
McAfee-GW-Edition	BehavesLike.Win32.Dropper.gh
Emsisoft	Trojan.GenericKDZ.67272 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Mansabo.bmu
MaxSecure	Trojan.Malware.101639626.susgen
Avira	HEUR/AGEN.1134711
Antiy-AVL	Trojan/Win32.Mansabo
Microsoft	Trojan:Win32/Trickbot.DHN!MTB
Arcabit	Trojan.Generic.D106C8
SUPERAntiSpyware	Trojan.Agent/Gen-TrickBot
ZoneAlarm	Trojan.Win32.Mansabo.evh
GData	Trojan.GenericKDZ.67272
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Trickbot.C4103580
McAfee	Trickbot-FSNZ!A2A9AF512718
MAX	malware (ai score=89)
VBA32	TScope.Trojan.VB
Malwarebytes	Trojan.Agent
Panda	Trj/GdSda.A
Zoner	Trojan.Win32.91375
ESET-NOD32	a variant of Win32/Injector.EMID
Tencent	Malware.Win32.Gencirc.10cdcb3b
Yandex	Trojan.TrickBot!KgK63ceiz6w
Ikarus	Trojan.Win32.Injector
Fortinet	W32/TrickBot.DI!tr
AVG	Win32:BankerX-gen [Trj]
Qihoo-360	HEUR/QVM03.0.3967.Malware.Gen

How to remove Win32/Injector.EMID?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Injector.EMID malicious file