Win32/Injector.EQKK information

The Win32/Injector.EQKK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Injector.EQKK virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/Injector.EQKK?


File Info:
crc32: 0F9C985E
md5: 8fb2e2814d15fa2a1541591322ee302f
name: 8FB2E2814D15FA2A1541591322EE302F.mlw
sha1: 1468065a7abdf23a978a04a7a2d3e1f05d5a4006
sha256: ee7cbf78e2eaf64499a56b92cd964a0ebe14868787a7ed1df89a8b82968823c3
sha512: cdaa0af2b8dcdb967c26feaf622d6fd5a90143471d96ae7d2ac42efa012ab5a28ee7fbc20f5707420c2bad9a86392a886da964a0af62807b3be7911e4858175e
ssdeep: 6144:wBlL/cMN5CcwzeG1a9HswxO3GsWif3qFKdzIKLXTQhV:CeMN56emEHeGsd/qFJKPi
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
0: [No Data]

Win32/Injector.EQKK also known as:

K7AntiVirus	Trojan ( 005899681 )
Elastic	malicious (high confidence)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7GW	Trojan ( 005899681 )
Cybereason	malicious.14d15f
ESET-NOD32	a variant of Win32/Injector.EQKK
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKD.37893423
MicroWorld-eScan	Trojan.GenericKD.37893423
Ad-Aware	Trojan.GenericKD.37893423
Sophos	Generic ML PUA (PUA)
DrWeb	Trojan.Packed2.43584
TrendMicro	TROJ_GEN.R002C0WJV21
FireEye	Generic.mg.8fb2e2814d15fa2a
Emsisoft	Trojan.Formbook (A)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Zapchast.tm
Avira	TR/Dropper.Gen
Kingsoft	Win32.Troj.Undef.(kcloud)
GData	Trojan.GenericKD.37893423
VBA32	Trojan.Azorult
MAX	malware (ai score=87)
Malwarebytes	Trojan.Injector
TrendMicro-HouseCall	TROJ_GEN.R002C0WJV21
Tencent	Win32.Trojan.Zapchast.Efla
Yandex	Trojan.Zapchast!uHFYiEqRVIs
Ikarus	Trojan.Win32.Injector
Fortinet	W32/Injector.EQKA!tr
AVG	Win32:TrojanX-gen [Trj]

How to remove Win32/Injector.EQKK?

Win32/Injector.EQKK removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X