What is "Win32/Injector.EODT"?

The Win32/Injector.EODT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.EODT virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Chinese (Traditional)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Injector.EODT?


File Info:
crc32: BB3FDFE3
md5: 9b509f1166db541d542bf77b272fe5f3
name: 9B509F1166DB541D542BF77B272FE5F3.mlw
sha1: 9755c4f7d746f444827702376c07a999598f582c
sha256: e947261444b110a5604981645a6d057a9603a1a6919a45a3f5c61a2d713aff5d
sha512: 67af5e2e60547e925da5c2d636d2fb5694e542f6be8d827333247e5e86fead2f7667b658cefd224d7116b5607cc69a536bc67de046d8bf70cdc495c538ac2c25
ssdeep: 1536:2xerXhDHOJaeD0GjU5UM12MvMpVPrV/lXh7tx:2YzhfeDJ45Ugg1h5t
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0404 0x04b0
ProductVersion: 1.00
InternalName: EUTONI
FileVersion: 1.00
OriginalFilename: EUTONI.exe
ProductName: VA.Ra Ce TooC

Win32/Injector.EODT also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.35814576
FireEye	Generic.mg.9b509f1166db541d
McAfee	PWS-FCTL!9B509F1166DB
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.35814576
K7GW	Riskware ( 0040eff71 )
Cyren	W32/Kryptik.BFF.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Dropper.Remcos-9816847-0
Kaspersky	Backdoor.Win32.Remcos.rxj
Alibaba	Backdoor:Win32/Remcos.bc19063f
AegisLab	Trojan.Multi.Generic.4!c
Ad-Aware	Trojan.GenericKD.35814576
Emsisoft	Trojan.GenericKD.35814576 (B)
F-Secure	Trojan.TR/AD.VBCryptor.ltgbg
DrWeb	Trojan.DownLoader36.30746
TrendMicro	TROJ_GEN.R002C0PLP20
McAfee-GW-Edition	BehavesLike.Win32.Fareit.lm
Sophos	Mal/Generic-S
Ikarus	Trojan.SuspectCRC
Avira	TR/AD.VBCryptor.ltgbg
MAX	malware (ai score=86)
Kingsoft	Win32.Hack.Remcos.r.(kcloud)
Microsoft	Trojan:Win32/Guloader.VAM!MTB
Arcabit	Trojan.Generic.D2227CB0
ZoneAlarm	Backdoor.Win32.Remcos.rxj
GData	Trojan.GenericKD.35814576
Cynet	Malicious (score: 85)
ALYac	Trojan.GenericKD.35814576
VBA32	TScope.Trojan.VB
Malwarebytes	Trojan.GuLoader
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Injector.EODT
TrendMicro-HouseCall	TROJ_GEN.R002C0PLP20
Tencent	Win32.Backdoor.Remcos.Hupc
Fortinet	W32/Generik.MNUDQBM!tr
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
Qihoo-360	Win32/Backdoor.1b9

How to remove Win32/Injector.EODT?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Win32/Injector.EODT”?