Categories: Malware

What is “Win32/Injector.YQO”?

The Win32/Injector.YQO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.YQO virus can do?

Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Executed a process and injected code into it, probably while unpacking
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Injector.YQO?


File Info:
crc32: 514D08B5md5: df9283844f27b2a0300687523170712cname: DF9283844F27B2A0300687523170712C.mlwsha1: 8125d43ed52dc1678a2ec42bd49eb22430eef164sha256: 1dbc98b93aeba706beefa96d0a396bb48fcb816de69534d2d004416d4954cdaesha512: cd667eb081014766d53e7c0db5d1a583533ed34269d612c105fa3d56a97853c766551be9539d5c21faba809a1276488935d673517c9a988060d681865092f2b7ssdeep: 12288:qKdj0gG+Ozmc3FSMk5OooKt1D7BvEQqQV0syR2rmhzsVK:qCj0gGxzmc3FSR5OooKH4QV0syIQzsVtype: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
Version Info:
0: [No Data]

Win32/Injector.YQO also known as:

DrWeb	Trojan.Siggen7.54390
Cynet	Malicious (score: 99)
ALYac	Gen:Trojan.ProcessHijack.QGW@aOzpQKp
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.44f27b
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Injector.YQO
Avast	FileRepMalware
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Trojan.ProcessHijack.QGW@aOzpQKp
MicroWorld-eScan	Gen:Trojan.ProcessHijack.QGW@aOzpQKp
Tencent	Win32.Trojan.Generic.dgri
Ad-Aware	Gen:Trojan.ProcessHijack.QGW@aOzpQKp
Sophos	Mal/Generic-S
Comodo	Malware@#2scnaceiaij4o
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Injector.jh
FireEye	Generic.mg.df9283844f27b2a0
Emsisoft	Gen:Trojan.ProcessHijack.QGW@aOzpQKp (B)
Avira	HEUR/AGEN.1126445
Antiy-AVL	Trojan/Generic.ASMalwS.1235743
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Trojan.ProcessHijack.QGW@aOzpQKp
McAfee	Artemis!DF9283844F27
MAX	malware (ai score=87)
VBA32	Malware-Cryptor.Inject.gen
Ikarus	Trojan.Win32.Buzus
AVG	FileRepMalware