Win32/Injector.EPOV malicious file

The Win32/Injector.EPOV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Injector.EPOV virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Reads data out of its own binary image
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/Injector.EPOV?


File Info:
crc32: 7855F3A5
md5: a57293f2f2f9632646efd3b9386944aa
name: A57293F2F2F9632646EFD3B9386944AA.mlw
sha1: e1dd6f6ce6f458526eba7a732bca41fb3099ee27
sha256: 9eaf84474a458ff7b9847687ed30ab6533a54c5ae028a2ec14885884440975f7
sha512: c55511b903afcaea46fe9190b3a796b844da93e04fc55f3761e5e12547565c022760765fda990acb5a457264f550a3889696a6e7f740e5cb22e11072d111c0a1
ssdeep: 12288:7dJDIO4I7RsW6/gWwwNAloZDtG0LMpQOlyoSJTpVnb7x3b/wrHJ8:7dJ8OvC/gUNMozDROQfTppb7x3ErH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/Injector.EPOV also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Banker1.36711
Cynet	Malicious (score: 100)
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_80% (W)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EPOV
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
ClamAV	Win.Malware.Fhrt-9863084-0
Kaspersky	HEUR:Backdoor.Win32.Remcos.gen
Sophos	Troj/Delf-HKU
BitDefenderTheta	Gen:NN.ZelphiF.34758.5GY@aSHhfMci
McAfee-GW-Edition	Fareit-FZO!A57293F2F2F9
FireEye	Generic.mg.a57293f2f2f96326
SentinelOne	Static AI – Suspicious PE
eGambit	PE.Heur.InvalidSig
Microsoft	Trojan:Win32/Woreflint.A!cl
GData	Gen:Variant.Zusy.389342
McAfee	Fareit-FZO!A57293F2F2F9
Malwarebytes	Trojan.MalPack.SMY.Generic
TrendMicro-HouseCall	TROJ_GEN.R014H0CFM21
Rising	Trojan.Generic@ML.90 (RDML:Cr3ZRj8llF+vtlp8vBEv3A)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/GenKryptik.EKLE!tr
AVG	Win32:RATX-gen [Trj]

How to remove Win32/Injector.EPOV?

Win32/Injector.EPOV removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X