Win32/Injector.EOYM removal guide

The Win32/Injector.EOYM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Injector.EOYM virus can do?

Reads data out of its own binary image
A process created a hidden window
Anomalous binary characteristics

How to determine Win32/Injector.EOYM?


File Info:
crc32: 8D36E941
md5: 0a228e3543c8873805273f78451e6510
name: 0A228E3543C8873805273F78451E6510.mlw
sha1: fb697891c919d7c2fd143366f7c0cace74854b1d
sha256: 41c3883da8b2fefc8e7a686adec3556efc6ac787d926d7cd4953706c2561c437
sha512: 837161218c830a6162077bdf97b6239458ba629e96556aa5cc7cea7e4260a8f733b0e05b81996d418b2d44d1bf1f8d746d441a3cca440468cd035a8120ced1f8
ssdeep: 3072:3Ts3BxJNmJDlmAXdjU9V5JvjehZGX+86Tp8Unuo7Arsp26JV8zt:3APWQyy9V5Nj/u8noPp26bEt
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
ProductName: cardie
Translation: 0x0409 0x0000

Win32/Injector.EOYM also known as:

K7AntiVirus	Trojan ( 005799ad1 )
DrWeb	Trojan.Siggen12.55541
Cynet	Malicious (score: 85)
Sangfor	Trojan.Win32.Save.a
K7GW	Trojan ( 005799ad1 )
Cyren	W32/Injector.AGC.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EOYM
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	Trojan.Win32.Agent.xahgys
BitDefender	Trojan.GenericKD.36577181
MicroWorld-eScan	Trojan.GenericKD.36577181
Tencent	Win32.Backdoor.Fareit.Auto
Ad-Aware	Trojan.GenericKD.36577181
Comodo	Malware@#5fjts2zybe5c
TrendMicro	TROJ_FRS.VSNW18C21
McAfee-GW-Edition	RDN/Loki
FireEye	Trojan.GenericKD.36577181
Emsisoft	Trojan.Agent (A)
Webroot	W32.Malware.Gen
Avira	TR/AD.LokiBot.ocndw
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Predator.AR!MTB
Gridinsoft	Trojan.Win32.Agent.oa
Arcabit	Trojan.Generic.D22E1F9D
AegisLab	Trojan.Win32.Agent.4!c
GData	Win32.Trojan-Stealer.LokiBot.RC3T6X
AhnLab-V3	Trojan/Win.Generic.C4390125
McAfee	RDN/Loki
MAX	malware (ai score=84)
Malwarebytes	Malware.Heuristic.1001
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_FRS.VSNW18C21
Rising	Malware.Undefined!8.C (CLOUD)
Ikarus	Win32.Outbreak
Fortinet	PossibleThreat.PALLAS.H
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.LokiBot.HoMASRYA

How to remove Win32/Injector.EOYM?

Win32/Injector.EOYM removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X