Should I remove “Win32/Injector.TQ”?

The Win32/Injector.TQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Injector.TQ virus can do?

Unconventionial language used in binary resources: Portuguese
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/Injector.TQ?


File Info:
name: 93E86B8ACE76FA79F118.mlw
path: /opt/CAPEv2/storage/binaries/47cd5f1ac7eb44335f12f0d982e821b7058811691f249f2b78f9bc9dd00de07a
crc32: AD9AAC21
md5: 93e86b8ace76fa79f11869d28851f2fc
sha1: e159dafe478d08f900fad560e0110ea875af9e92
sha256: 47cd5f1ac7eb44335f12f0d982e821b7058811691f249f2b78f9bc9dd00de07a
sha512: 7edde801630982eaca2f9173aab90d9bc0df826a7e952e546820f9aef43bd216f5f7996d4ea2461683bcaf406f7113bbdfd8229f8bf0d678cc1b6eaeb3fbb3ec
ssdeep: 96:Jeb7O5NWjuhaq3j8BMFSK0lXAPXdZwzIqHqm1GEiIppPtboynInXxnPY:48Dhah6r0EHwzHqIGCLP1oynUBA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T106F1D91F87A5C526DFC11BB40766CD3BA437BA70700AEB234A8026053D70A52E9A96DB
sha3_384: b285e03655fbd90e4a7cf206a3af84f923119f0808a1029a62340b10e9d65fddb2dd4a382aa1a1949766e9130943697f
ep_bytes: 660599006683e807eb1790909066f7d0
timestamp: 2008-11-26 00:11:04

Version Info:
ProductName: Project1
FileVersion: 1.00
ProductVersion: 1.00
InternalName: Project1
OriginalFilename: Project1.exe
Translation: 0x0409 0x04b0

Win32/Injector.TQ also known as:

Lionic	Trojan.Win32.Generic.kYLC
MicroWorld-eScan	Gen:Variant.Fugrafa.70843
ClamAV	Win.Dropper.Hydracrypt-9875071-0
FireEye	Generic.mg.93e86b8ace76fa79
ALYac	Gen:Variant.Fugrafa.70843
Cylance	Unsafe
Zillya	Backdoor.Agent.Win32.5009
Alibaba	VirTool:Win32/CeeInject.d3a572fc
CrowdStrike	win/malicious_confidence_90% (W)
VirIT	Trojan.Win32.Crypt.AUW
Symantec	Trojan.Dropper
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Injector.TQ
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Fugrafa.70843
NANO-Antivirus	Trojan.Win32.Kolabc.lzqa
Avast	Win32:Agent-AECE [Trj]
Tencent	Win32.Trojan.Generic.Huzg
Ad-Aware	Gen:Variant.Fugrafa.70843
Emsisoft	Gen:Variant.Fugrafa.70843 (B)
Comodo	Backdoor.Win32.Agent.UWP@rkh7p
DrWeb	BackDoor.Siggen.9615
VIPRE	Gen:Variant.Fugrafa.70843
TrendMicro	BKDR_INJECTOR_0000001.TOMA
McAfee-GW-Edition	BackDoor-DKI.gen.w
Trapmine	malicious.moderate.ml.score
Sophos	Mal/EncPk-IT
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Fugrafa.70843
Jiangmin	Backdoor/Huigezi.2008.abai
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Generic.ASMalwFH.61
ViRobot	Backdoor.Win32.Agent.8192.E
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	VirTool:Win32/CeeInject.gen!J
Google	Detected
AhnLab-V3	Win32/IRCBot2.worm.Gen
McAfee	BackDoor-DKI.gen.w
MAX	malware (ai score=100)
VBA32	TScope.Malware-Cryptor.SB
TrendMicro-HouseCall	BKDR_INJECTOR_0000001.TOMA
Rising	Trojan.Win32.Nodef.kge (CLASSIC)
Yandex	Trojan.GenAsa!duB5ZA74YOI
Ikarus	VirTool.Win32.CeeInject
MaxSecure	Trojan.Malware.1466772.susgen
Fortinet	W32/Generic.AC.233CC9!tr
BitDefenderTheta	AI:Packer.B2868A651F
AVG	Win32:Agent-AECE [Trj]
Cybereason	malicious.ace76f
Panda	Trj/Genetic.gen

How to remove Win32/Injector.TQ?

Win32/Injector.TQ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X