How to remove "Win32/Injector.EPHD"?

The Win32/Injector.EPHD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.EPHD virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Injector.EPHD?


File Info:
crc32: DADAFE03
md5: 3d4f3aef381b1d5eb863123389b7f187
name: 3D4F3AEF381B1D5EB863123389B7F187.mlw
sha1: ffbadbc4280dcbce95a1da4d34cdb03ebe8864d3
sha256: 8f94fe68e4decbed1a460bbb09116e1f41fc6987bce37ebb6fd09230d3f89d61
sha512: cb442938813a0e91d5d7b87ff1f951fdfaccbbb958314cc6817beabedca7f9ddf0bfaef654e748e9e6fda13afa1d0242416daf9a9b9036127f713e707a6bf1a0
ssdeep: 12288:l0VpoRuiXGEpA1IgYLuuinRHzhLsiK3Bs3qGBXFbo1/RXjI4EmYu4:opoRbp8WKZnKBi/HKqbH
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
0: [No Data]

Win32/Injector.EPHD also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_70% (W)
Cybereason	malicious.4280dc
Cyren	W32/Injector.AHL1.gen!Eldorado
ESET-NOD32	a variant of Win32/Injector.EPHD
APEX	Malicious
Kaspersky	UDS:DangerousObject.Multi.Generic
Sophos	ML/PE-A
McAfee-GW-Edition	BehavesLike.Win32.ICLoader.hc
FireEye	Generic.mg.3d4f3aef381b1d5e
SentinelOne	Static AI – Malicious PE
F-Prot	W32/Injector.AHL1.gen!Eldorado
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	UDS:DangerousObject.Multi.Generic
McAfee	Artemis!3D4F3AEF381B
Ikarus	Trojan.NSIS.Agent
Fortinet	W32/Injector.EPHB!TR
Paloalto	generic.ml

How to remove Win32/Injector.EPHD?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Win32/Injector.EPHD”?