Should I remove “Win32/Injector.EMOY”?

The Win32/Injector.EMOY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.EMOY virus can do?

• Executable code extraction
• Injection (inter-process)
• Injection (Process Hollowing)
• Creates RWX memory
• A process attempted to delay the analysis task.
• The binary likely contains encrypted or compressed data.
• Executed a process and injected code into it, probably while unpacking
• Attempts to remove evidence of file being downloaded from the Internet
• Tries to unhook or modify Windows functions monitored by Cuckoo
• Installs itself for autorun at Windows startup
• Checks the CPU name from registry, possibly for anti-virtualization
• Creates a copy of itself
• Harvests credentials from local FTP client softwares
• Harvests information related to installed mail clients
• Anomalous binary characteristics

How to determine Win32/Injector.EMOY?

File Info:
crc32: 6B16EFC0
md5: 1903f61f59c3db710a6ab4918c9f3135
name: morganx.exe
sha1: f56c45dd89f2e66053178ec6e6445ce0159f877a
sha256: 2a2bbc901694f1f22ec2bcfb31becc3d55ff3db241137e423db9de4c97ff6516
sha512: 6ac6445d0c954e3b8174e3c2b9f8b1fc684ddd23d98158541c4591bc4f02d613693613f0f1790aa226fb6999527f13f7a83789925df6a529ad7e30391247a0df
ssdeep: 24576:EkAVCi74LofeHXecQmiDXeOR2bh4s9ET7g:Eiiuo2Oq4XeOR77g
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/Injector.EMOY also known as:

How to remove Win32/Injector.EMOY?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.