Win32/Injector.EOPA (file analysis)

The Win32/Injector.EOPA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Injector.EOPA virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/Injector.EOPA?


File Info:
crc32: CE3C8BC2
md5: 3ea5f2026f29ad304deb032306e375d5
name: 3EA5F2026F29AD304DEB032306E375D5.mlw
sha1: 50f89e2a1a07ec4f1ec8ab61f25df2b81fee32a1
sha256: 45fda70b08542ae52a8228a61e317973f42b477583841e384e9817d7d2dd3709
sha512: b90466a01386446e34eee4c99d01cd8f352847560142a7996b58aaf5de08226b00819fc2e120e9beb9db33e8acd6d71c826d7c0c34bdf208f7682b7ce82477ff
ssdeep: 6144:EqjIxyyzQzgMajtKspN4AqZ6q58lkbIfnWud17VJEnXmt:xayyzQ8FjYulqZ6Jjfnd/J+XW
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright Reimo-Jik
FileVersion: 7.21.60.59
CompanyName: cardie
LegalTrademarks: acceptant
Comments: jpeg
ProductName: electronically
FileDescription: jpeg
Translation: 0x0409 0x04e4

Win32/Injector.EOPA also known as:

MicroWorld-eScan	Zum.Androm.1
FireEye	Generic.mg.3ea5f2026f29ad30
McAfee	Artemis!3EA5F2026F29
Malwarebytes	Malware.Heuristic.1001
Sangfor	Trojan.Win32.Save.a
BitDefender	Zum.Androm.1
Cybereason	malicious.26f29a
Cyren	W32/Injector.AER.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
Kaspersky	HEUR:Backdoor.Win32.NanoBot.gen
Emsisoft	Zum.Androm.1 (B)
F-Secure	Backdoor.BDS/NanoBot.tygqm
DrWeb	Trojan.Siggen12.135
McAfee-GW-Edition	BehavesLike.Win32.AdwareAdload.fc
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Injector
Avira	BDS/NanoBot.tygqm
MAX	malware (ai score=85)
Antiy-AVL	Trojan/Win32.Injects
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Tnega!ml
Arcabit	Zum.Androm.1
ZoneAlarm	HEUR:Backdoor.Win32.NanoBot.gen
GData	Zum.Androm.1
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZedlaF.34574.bu4@a4vYtGei
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/Injector.EOPA
Rising	Trojan.Injector!8.C4 (CLOUD)
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Injector.EOOW!tr
Webroot	W32.Malware.Gen
AVG	FileRepMalware
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_80% (W)
Qihoo-360	Win32/Backdoor.Nanocore.HyoDVN8A

How to remove Win32/Injector.EOPA?

Win32/Injector.EOPA removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X