About “Win32/Injector.EPAY” infection

Malware Removal

The Win32/Injector.EPAY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Win32/Injector.EPAY virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Anomalous binary characteristics

How to determine Win32/Injector.EPAY?


File Info:

crc32: 909FCB5B
md5: 652744fb67a7cca34697aed9469b73d3
name: 652744FB67A7CCA34697AED9469B73D3.mlw
sha1: 180167e875280b9ddce80e715a50bbd18912b651
sha256: 6657aeabd5ded830361aad9112749d785fc0fbe46121daeb7acb23cd841274ed
sha512: 435832418081f92b21d94338e28eea8254a8d8d35d00849a0573aa2976ed20efea1519568268811b0d35063672dd12d77fa338a226344895a1cf4c82086a84c2
ssdeep: 6144:gbO3stvLGtELbMUTKZbQTK3bnifMVG2WbAmqJ84m90+4q:bSityjK91z2MVQbAH+420Xq
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Injector.EPAY also known as:

K7AntiVirusRiskware ( 0040eff71 )
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
ALYacTrojan.Agent.FormBook
CylanceUnsafe
SangforTrojan.Win32.Spynoon.VAM
CrowdStrikewin/malicious_confidence_60% (W)
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.875280
CyrenW32/Injector.AGV.gen!Eldorado
SymantecTrojan Horse
ESET-NOD32a variant of Win32/Injector.EPAY
APEXMalicious
AvastWin32:PWSX-gen [Trj]
KasperskyHEUR:Trojan-Spy.Win32.Noon.gen
BitDefenderDropped:Trojan.GenericKDZ.74004
MicroWorld-eScanDropped:Trojan.GenericKDZ.74004
Ad-AwareDropped:Trojan.GenericKDZ.74004
SophosTroj/Kryptik-VJ
ComodoTrojWare.Script.UMal.pmafk@0
VIPRETrojan.Win32.Generic.pak!cobra
McAfee-GW-EditionBehavesLike.Win32.Dropper.fc
FireEyeGeneric.mg.652744fb67a7cca3
EmsisoftDropped:Trojan.GenericKDZ.74004 (B)
AviraTR/AD.Swotter.axzcg
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Spynoon.VAM!MTB
ArcabitTrojan.Generic.D12114
ZoneAlarmHEUR:Trojan-Spy.Win32.Noon.gen
GDataWin32.Trojan-Stealer.FormBook.JOC5A5
AhnLab-V3Trojan/Win.Generic.C4406766
McAfeeArtemis!652744FB67A7
MAXmalware (ai score=83)
PandaTrj/CI.A
RisingTrojan.Spynoon!8.11885 (CLOUD)
IkarusTrojan-Spy.Agentnoon
FortinetW32/Injector.EPBA!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml

How to remove Win32/Injector.EPAY?

Win32/Injector.EPAY removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment