Malware

How to remove “Win32/Injector.EOJV”?

Malware Removal

The Win32/Injector.EOJV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Injector.EOJV virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Injector.EOJV?


File Info:

crc32: 7F17141E
md5: 0a0576c3932b07c6f7dcd3bed825fc04
name: 0A0576C3932B07C6F7DCD3BED825FC04.mlw
sha1: 76588a86b1d9898f2bdb1dcac42642ff0c9833b2
sha256: 2a5abaac43855eba69f0604c77707c72d197c3b3118d458f2a944f371bc65fdd
sha512: ec6c796cc55f309c8bd79844f6442f926917496b2c32b06a9d797908d95fbf3535220dad322055a69d1b109583786a59864c257b2f14ae451980c7bc9694e035
ssdeep: 6144:2YYveuHLzXhmGfghSihf3hOCwK0XHtbUW7dld7GSLmQ/dj/5XbmqtYS:u5rbhWxZLwtRwSLmCp/J1b
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Win32/Injector.EOJV also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.45670957
FireEyeGeneric.mg.0a0576c3932b07c6
CAT-QuickHealBackdoor.Androm
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan ( 005772cf1 )
BitDefenderTrojan.GenericKD.45670957
K7GWTrojan ( 005772cf1 )
Cybereasonmalicious.3932b0
CyrenW32/Injector.AEF.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
KasperskyHEUR:Trojan.Win32.Convagent.gen
AlibabaTrojan:Win32/Convagent.2fbf9170
AegisLabTrojan.Win32.Androm.m!c
TencentWin32.Trojan.Convagent.Dur
Ad-AwareTrojan.GenericKD.45670957
EmsisoftTrojan.GenericKD.45670957 (B)
ComodoMalware@#27x13911n7byn
F-SecureTrojan.TR/Injector.hxvji
TrendMicroTROJ_FRS.0NA103B421
McAfee-GW-EditionBehavesLike.Win32.Vopak.fc
SophosMal/Generic-S
IkarusTrojan-Spy.Agent
WebrootW32.Malware.Gen
AviraTR/Injector.dkpaw
MAXmalware (ai score=82)
KingsoftWin32.Hack.Undef.(kcloud)
MicrosoftTrojan:Win32/Ymacco.AA08
GridinsoftAdware.Win32.Linkury.oa!s1
ArcabitTrojan.Generic.D2B8E22D
ZoneAlarmHEUR:Backdoor.Win32.Androm.gen
GDataWin32.Malware.CredStealer.CD9LSG@gen
CynetMalicious (score: 100)
AhnLab-V3Malware/Gen.RL_Reputation.R364385
McAfeeRDN/Generic BackDoor
MalwarebytesTrojan.Injector
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Injector.EOJV
TrendMicro-HouseCallTROJ_FRS.0NA103B421
RisingTrojan.Injector!1.D21E (CLASSIC)
SentinelOneStatic AI – Malicious PE
FortinetW32/Injector.EOKQ!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/Backdoor.Androm.HyoDCNoA

How to remove Win32/Injector.EOJV?

Win32/Injector.EOJV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment