Win32/Injector.EPIU malicious file

The Win32/Injector.EPIU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.EPIU virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Reads data out of its own binary image
Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Injector.EPIU?


File Info:
crc32: 64D8BC5E
md5: 72bac8d88ee03e67ce7e1fe4f20c0a39
name: 72BAC8D88EE03E67CE7E1FE4F20C0A39.mlw
sha1: 7ce9f822a5c99992b86bf2eb402b6e3ec69c2a2d
sha256: 1ed6cbc9b8af4e05e97a00b4c26fdd26194f9a554c4ef479b3ef029ec0fdaad8
sha512: 00dbe5db7993f07dcbad1ba6f4209a33cd250b5571fe845c5a0b00dda51319a5d3a6397f4402cbeea053211412b620309f0e4791cbfd3af183362bca51cda31a
ssdeep: 12288:1t6OQVbhOJAtV1ATM6/sLypTemDOVo3N+sm4PJl6nIFg:fPUhOJAtvATn/RTeCEaN24D6l
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: 
InternalName: 
FileVersion: 0.2.0.0
CompanyName: 
PrivateBuild: Only for test! in creating ...
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 0.1.0.0
FileDescription: x421x43ex437x434x430x435x442 x441x43fx438x441x43ax438 x444x430x439x43bx43ex432.
OriginalFilename: 
Translation: 0x0419 0x04e3

Win32/Injector.EPIU also known as:

K7AntiVirus	Trojan ( 0057af071 )
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:Win32/GenKryptik.260a76f3
K7GW	Trojan ( 0057af071 )
Cyren	W32/Trojan.VKYF-4401
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EPIU
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	VHO:Backdoor.Win32.Convagent.gen
Sophos	Mal/Generic-S
McAfee-GW-Edition	Fareit-FZO!72BAC8D88EE0
eGambit	PE.Heur.InvalidSig
Kingsoft	Win32.Hack.Undef.(kcloud)
Microsoft	Trojan:Win32/Woreflint.A!cl
McAfee	Fareit-FZO!72BAC8D88EE0
Panda	Trj/Agent.ALS
Rising	Trojan.Kryptik!1.D2D5 (CLASSIC)
Ikarus	Win32.SuspectCrc
AVG	Win32:Malware-gen

How to remove Win32/Injector.EPIU?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Injector.EPIU malicious file