Categories: Malware

Win32/Injector.EOKM information

The Win32/Injector.EOKM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.EOKM virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Creates a copy of itself
Anomalous binary characteristics

How to determine Win32/Injector.EOKM?


File Info:
crc32: 4C9EA374md5: 30dcecd1717926af1a3ece326d5a3f77name: 30DCECD1717926AF1A3ECE326D5A3F77.mlwsha1: c7fc084d2b6016f8b6a230687f8d12c7ced71572sha256: a95d4bd25849a4e0a3ce3ba51c98b3c713bcb7afafdabdb2de8c77653cae0d47sha512: 7de77092952df61e4bf084c4875b8cb62d0bc4c0c92a78d7508946a34aff97e9dfe6c2ed61665024cfc162ade7df0c3d1fbc4f8e0a284559a9a0b28e6c6c33dessdeep: 6144:OYYVstvLGtELbMUTKZ6/BtdTDa95jJL9CeIogCQNubbjykQh:aSityjKU/BtJDgtJL9aog5u3jwtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Injector.EOKM also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.36291944
CAT-QuickHeal	Trojan.Multi
ALYac	Trojan.GenericKD.36291944
Malwarebytes	Backdoor.Remcos
VIPRE	Trojan.Win32.Generic.pak!cobra
AegisLab	Trojan.Multi.Generic.4!c
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0057739e1 )
BitDefender	Trojan.GenericKD.36291944
K7GW	Trojan ( 0057739e1 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Generic.D229C568
Cyren	W32/Trojan.KOBS-6502
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Agent.gen
Alibaba	Trojan:Win32/SpyNoon.f41c2395
NANO-Antivirus	Trojan.Win32.Androm.ikbioz
Tencent	Win32.Trojan.Agent.Ljui
Ad-Aware	Trojan.GenericKD.36291944
Sophos	Mal/Generic-S
Comodo	Malware@#2mg292yn3718p
F-Secure	Trojan.TR/Crypt.ZPACK.Gen
DrWeb	Trojan.Loader.701
TrendMicro	Backdoor.Win32.ANDROM.THBOCBA
McAfee-GW-Edition	BehavesLike.Win32.Vopak.fc
FireEye	Generic.mg.30dcecd1717926af
Emsisoft	Trojan.GenericKD.36291944 (B)
Ikarus	Trojan-Spy.Agent
Webroot	W32.Malware.Gen
Avira	HEUR/AGEN.1140854
Antiy-AVL	Trojan[Backdoor]/Win32.Androm
Kingsoft	Win32.Troj.Undef.(kcloud)
Gridinsoft	Adware.Win32.Linkury.oa
Microsoft	Trojan:Win32/SpyNoon.ST!MTB
ZoneAlarm	HEUR:Trojan-Spy.Win32.Noon.gen
GData	Win32.Backdoor.Remcos.4QKHMW
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C4320688
McAfee	RDN/Generic.cf
MAX	malware (ai score=99)
VBA32	Trojan.Agent
Cylance	Unsafe
ESET-NOD32	a variant of Win32/Injector.EOKM
TrendMicro-HouseCall	Backdoor.Win32.ANDROM.THBOCBA
Rising	Trojan.Injector!1.D261 (CLOUD)
Yandex	Trojan.Igent.bVhxDS.31
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Agent!tr
BitDefenderTheta	Gen:NN.ZedlaF.34804.am4@ayLFbhc
AVG	Win32:MalwareX-gen [Trj]
Cybereason	malicious.171792
Avast	Win32:MalwareX-gen [Trj]
Qihoo-360	Win32/Backdoor.Androm.HyoDCNoA