Should I remove “Win32/Injector.EQDZ”?

The Win32/Injector.EQDZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Injector.EQDZ virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/Injector.EQDZ?


File Info:
crc32: 0D7D1B15
md5: 0b042901cc8cebe4ad918f889d8928e0
name: 0B042901CC8CEBE4AD918F889D8928E0.mlw
sha1: 7f03f52d593e4fea5e13525d7e213cc950f3d84a
sha256: a7acd97fcff334160640901d977010aa55397f5a6da375ab38bcb1622b800f7d
sha512: 87cc3b720ba5b0901963fdeee60254992931a4ea3cd36b2dcd1aeb886563e9e7c39619b5c17716557b2b6a652052c717d9314b724b5dc0b48f3e36ade0aa52f9
ssdeep: 6144:F8LxBsng9g/UDsJCp4TXEoEqTXCKfsN3k3PnZRAwbxpS:/ng9g8DeIh6SKEqB9rS
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
0: [No Data]

Win32/Injector.EQDZ also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Agent.i!c
Elastic	malicious (high confidence)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
BitDefender	Trojan.NSISX.Spy.Gen.4
Cybereason	malicious.1cc8ce
Cyren	W32/Injector.ALI.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Injector.EQDZ
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan-Spy.Win32.Noon.gen
MicroWorld-eScan	Trojan.NSISX.Spy.Gen.4
McAfee-GW-Edition	BehavesLike.Win32.AdwareAdload.dc
FireEye	Generic.mg.0b042901cc8cebe4
Emsisoft	Trojan.NSISX.Spy.Gen.4 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Zum.Androm.1
McAfee	Artemis!0B042901CC8C
MAX	malware (ai score=85)
Paloalto	generic.ml

How to remove Win32/Injector.EQDZ?

Win32/Injector.EQDZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X