Categories: Malware

Win32/Injector.FHN removal tips

The Win32/Injector.FHN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.FHN virus can do?

Executable code extraction
Unconventionial language used in binary resources: Spanish (Modern)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Injector.FHN?


File Info:
crc32: 77E9613Dmd5: 6bccc4ef8d8b1a135a37228e97c81516name: 6BCCC4EF8D8B1A135A37228E97C81516.mlwsha1: 63d51e781fb4e0c949b99ef044c6e2b2371a0a15sha256: dd1f4ff876233a09eefd1c5568d1da404e77fd544d35660119980a22e2cf7af0sha512: 45899a90e2e83a80f3e671a72b921e19f4bf06a95f9cfa7748ee27d099e53ce3d0304d66ff705b2dfa18d92ce2a92c5d09d801ec7317440a6f279bdcb18fdbb8ssdeep: 6144:IJ4gbWYnHNMmjujI6pPzby3y9d+7jtWTdbYYJBypX1A1p3Fsef:64KBHqNjIcP/ey9M7jClO1Ar3Ptype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0c0a 0x04b0InternalName: stubFileVersion: 1.00CompanyName: serverProductName: aaaProductVersion: 1.00OriginalFilename: stub.exe

Win32/Injector.FHN also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop3.1173
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.VBCrypt.MF.6298
ALYac	Trojan.Crypt.Gen.1
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Worm:Win32/Vbinder.02c3a7da
Cybereason	malicious.f8d8b1
Cyren	W32/VBInject.CC.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.FHN
APEX	Malicious
Avast	Win32:GenMalicious-KKX [Trj]
Kaspersky	Worm.Win32.VBNA.d
BitDefender	Trojan.Crypt.Gen.1
NANO-Antivirus	Trojan.Win32.MLW.dqlxp
MicroWorld-eScan	Trojan.Crypt.Gen.1
Tencent	Win32.Worm.Vbna.Wskq
Ad-Aware	Trojan.Crypt.Gen.1
Sophos	ML/PE-A + Mal/VBDrop-G
Comodo	TrojWare.Win32.Trojan.Buzus.~HAA@208zhd
BitDefenderTheta	AI:Packer.4A6140621B
VIPRE	Trojan.Win32.Buzus (v)
TrendMicro	Mal_BUZUS-6
McAfee-GW-Edition	BehavesLike.Win32.VBObfus.dc
FireEye	Generic.mg.6bccc4ef8d8b1a13
Emsisoft	Trojan.Crypt.Gen.1 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Worm/VBNA.gzlo
Avira	TR/Dropper.Gen
eGambit	Unsafe.AI_Score_99%
Microsoft	VirTool:Win32/VBInject.RT
ZoneAlarm	Worm.Win32.VBNA.d
GData	Trojan.Crypt.Gen.1
AhnLab-V3	Trojan/Win32.Poison.C416059
McAfee	BackDoor-DZP.b
MAX	malware (ai score=89)
VBA32	Malware-Cryptor.VB.gen.1
Malwarebytes	MachineLearning/Anomalous.95%
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	Mal_BUZUS-6
Rising	Trojan.VbUndef!1.99F7 (CLOUD)
Ikarus	Packed.Win32.CPEX-based
Fortinet	W32/VBInjector.fam!tr
AVG	Win32:GenMalicious-KKX [Trj]
Paloalto	generic.ml