Malware

What is “Win32/Injector.GPZ”?

Malware Removal

The Win32/Injector.GPZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Win32/Injector.GPZ virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Behavioural detection: Injection (Process Hollowing)
  • Behavioural detection: Injection (inter-process)

How to determine Win32/Injector.GPZ?


File Info:

name: A495FE90AAAB4DF9EC63.mlw
path: /opt/CAPEv2/storage/binaries/23e312e7050d7cf7ab4d6f920522a296746775d8b0a7e77b6b487c09f15b835c
crc32: 0A8AC3FE
md5: a495fe90aaab4df9ec63582bf8ce9de6
sha1: b18a0a6a06d6d72a05555c384c3c16d74ccd5188
sha256: 23e312e7050d7cf7ab4d6f920522a296746775d8b0a7e77b6b487c09f15b835c
sha512: c0bbfdccef2a8d222e1bc489c9bcedfa0bb23904d2c7292f1b28f6b86d37eea221a8a5f332104e0868841bdf6018d137691374368f154888979891a8c438c25e
ssdeep: 6144:I6qV581vVo0BdIKy2Lf59ZbLak/Se3/JjLX9O/:I68KXIAfxPV1S
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F144AE353AA6E11FFB768A346B6467E6F665B5323D1099079047B11C1E33E42CEB022F
sha3_384: ad8457d700a7d9d9a4748b34f059937209cc3187c42623c55387f42bbda330c593c5064af464356dac0085e230c3afd5
ep_bytes: 68cc174000e8eeffffff000000000000
timestamp: 2011-05-26 07:49:26

Version Info:

Translation: 0x0409 0x04b0
Comments: xyv
CompanyName: ju
FileDescription: rwrkzbdm
ProductName: knwjompb
FileVersion: 16.23.0021
ProductVersion: 16.23.0021
InternalName: gshcv
OriginalFilename: gshcv.exe

Win32/Injector.GPZ also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Yakes.lmDy
MicroWorld-eScanGen:Heur.PonyStealer.qm0@iWNTr4oi
McAfeePWS-Zbot.gen.aye
VIPREGen:Heur.PonyStealer.qm0@iWNTr4oi
SangforSuspicious.Win32.Save.vb
AlibabaTrojan:Win32/VBKrypt.3d56e4b0
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/VB.DJ.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Injector.GPZ
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.VBKrypt.lnve
BitDefenderGen:Heur.PonyStealer.qm0@iWNTr4oi
NANO-AntivirusTrojan.Win32.VBKrypt.nnotp
AvastWin32:Malware-gen
TencentWin32.Trojan.Vbkrypt.Ftgl
Ad-AwareGen:Heur.PonyStealer.qm0@iWNTr4oi
EmsisoftGen:Heur.PonyStealer.qm0@iWNTr4oi (B)
ComodoMalware@#37gpc8y4xsxig
ZillyaTrojan.VBKrypt.Win32.263588
McAfee-GW-EditionPWS-Zbot.gen.aye
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.a495fe90aaab4df9
SophosML/PE-A + Troj/VBInj-AH
SentinelOneStatic AI – Malicious PE
GDataGen:Heur.PonyStealer.qm0@iWNTr4oi
JiangminTrojan.VBKrypt.buj
WebrootW32.Obfuscate.Gen
AviraTR/Spy.Zbot.smk
Antiy-AVLTrojan/Generic.ASMalwS.37EA
ArcabitTrojan.PonyStealer.E480AC
MicrosoftTrojan:Win32/EyeStye.N
GoogleDetected
AhnLab-V3Trojan/Win32.VBKrypt.C22912
BitDefenderThetaAI:Packer.88CB8E8620
ALYacGen:Heur.PonyStealer.qm0@iWNTr4oi
MAXmalware (ai score=94)
VBA32TScope.Trojan.VB
RisingMalware.Undefined!8.C (TFE:4:pT63r26vhdI)
YandexTrojan.GenAsa!oiUD9ZvQzTg
IkarusTrojan.VB.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/VBKrypt!tr
AVGWin32:Malware-gen
Cybereasonmalicious.0aaab4
PandaTrj/Genetic.gen

How to remove Win32/Injector.GPZ?

Win32/Injector.GPZ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment