Win32/Injector.EPPV information

The Win32/Injector.EPPV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Injector.EPPV virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/Injector.EPPV?


File Info:
crc32: 3D934E75
md5: a5a0d8c50db20164b4897cd982926e08
name: A5A0D8C50DB20164B4897CD982926E08.mlw
sha1: 430ae871a18ea43cb87cf3d8030ec4eb14043284
sha256: d01ae8d985a333d9c39bad55b8129b73451f037bff556a08ddb7f7efc17818fa
sha512: 6ff5da4fa1ab6487cf2be36aa5b6a95ebd9a18af20ca03f4803c9e5eecf890f5e923e275b0013a69a388ec998d40a9a2f92be4e768d25a1fa05d733f52bfea7d
ssdeep: 1536:Ij3kNKA2xhjR8geZUQN1bq15UzZBoeMPQmvO4NqAH9fxtSJet8eNdqPEVBP181t:U0NKA2xNmgeVN1ppmzqAd1/ct2LKk0
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: Rekordholderne2
FileVersion: 1.00
CompanyName: Elastic
Comments: Elastic
ProductName: Elastic
ProductVersion: 1.00
FileDescription: Elastic
OriginalFilename: Rekordholderne2.exe

Win32/Injector.EPPV also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Trojan.GenericKD.37150497
ALYac	Trojan.GenericKD.37150497
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (W)
Alibaba	Backdoor:Win32/Androm.b2f884cf
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.1a18ea
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EPPV
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	Backdoor.Win32.Androm.uqfb
BitDefender	Trojan.GenericKD.37150497
Ad-Aware	Trojan.GenericKD.37150497
Sophos	Generic PUA ED (PUA)
Comodo	TrojWare.Win32.UMal.glnpx@0
BitDefenderTheta	Gen:NN.ZevbaF.34770.lm0@a4sRtWoi
McAfee-GW-Edition	BehavesLike.Win32.Fareit.cm
FireEye	Generic.mg.a5a0d8c50db20164
Emsisoft	Trojan.GenericKD.37150497 (B)
Webroot	W32.Malware.Gen
eGambit	Unsafe.AI_Score_99%
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
AegisLab	Trojan.Win32.Androm.m!c
GData	Trojan.GenericKD.37150497
AhnLab-V3	Malware/Win.Generic.C4537686
McAfee	RDN/Loki
MAX	malware (ai score=88)
VBA32	TScope.Trojan.VB
Malwarebytes	Trojan.GuLoader
Panda	Trj/GdSda.A
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Malicious_Behavior.SB
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Win32/Injector.EPPV?

Win32/Injector.EPPV removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X