Trojan:AutoIt/Inject.V!MTB removal tips

The Trojan:AutoIt/Inject.V!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:AutoIt/Inject.V!MTB virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan:AutoIt/Inject.V!MTB?


File Info:
name: 35B683294C49A716E07D.mlw
path: /opt/CAPEv2/storage/binaries/6211cdc83414d08bc0940921dadae20192d9972f9979fe2d2890b70697680b2d
crc32: A2F6C295
md5: 35b683294c49a716e07dc192fad338fd
sha1: 1e87a7b0c01c33c5fd0579d633ebe3c27b530739
sha256: 6211cdc83414d08bc0940921dadae20192d9972f9979fe2d2890b70697680b2d
sha512: c4a5fcc7f0a87f6a08ffc7c942f820cfe4a5153755677e4ec4fa671ff856db40ba2f2d4bd9cbde3b9c2aaf9fd6e4aa11475c2b248f003a78e47ad76f41e9303c
ssdeep: 24576:Wu6J33O0c+JY5UZ+XC0kGsoTacbl6u2iC:4u0c++OCvkGsEacJ67r
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T137158D22B3DDC360CB669173BF69B3056EBB7C650630B85B2F980D3DA960171162D7A3
sha3_384: 34ff9bf7da5c31a653bae2c19b779ec98b0f8829c45cd8d1ab23dfde248c1399158597886667361a269ccf51df805695
ep_bytes: e8b5d00000e97ffeffffcccccccccccc
timestamp: 2019-05-14 14:55:21

Version Info:
Translation: 0x0809 0x04b0

Trojan:AutoIt/Inject.V!MTB also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.AutoIt.4!c
tehtris	Generic.Malware
DrWeb	Trojan.AutoIt.426
MicroWorld-eScan	Trojan.AutoIt.Agent.VQ
FireEye	Generic.mg.35b683294c49a716
CAT-QuickHeal	Trojan.AutoIT.Injector.A
McAfee	Trojan-AitInject.aq
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Virus.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/AutoitCrypt.180
K7GW	Trojan ( 0055dc781 )
K7AntiVirus	Trojan ( 0055dc781 )
BitDefenderTheta	AI:Packer.39DE3CF819
Cyren	W32/AutoIt.QF.gen!Eldorado
Symantec	AUT.Heuristic!gen5
Elastic	malicious (high confidence)
ESET-NOD32	Win32/Packed.Autoit.NBC suspicious
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan.Win32.Autoit.gen
BitDefender	Trojan.AutoIt.Agent.VQ
Avast	AutoIt:Injector-JF [Trj]
Tencent	Trojan.Win32.Agent.hfw
Sophos	Troj/AutoIt-CLG
F-Secure	Dropper.DR/AutoIt.Gen8
VIPRE	Trojan.AutoIt.Agent.VQ
TrendMicro	Trojan.AutoIt.CRYPTINJECT.SMA
McAfee-GW-Edition	BehavesLike.Win32.TrojanAitInject.ch
Trapmine	suspicious.low.ml.score
Emsisoft	Trojan.AutoIt.Agent.VQ (B)
SentinelOne	Static AI – Malicious PE
GData	Trojan.AutoIt.Agent.VQ
Avira	DR/AutoIt.Gen8
Antiy-AVL	GrayWare/Autoit.ShellCode.a
Arcabit	Trojan.AutoIt.Agent.VQ
ZoneAlarm	UDS:Trojan.Win32.Autoit.gen
Microsoft	Trojan:AutoIt/Inject.V!MTB
Google	Detected
AhnLab-V3	Win-Trojan/AutoInj.Exp
VBA32	Trojan.Autoit
ALYac	Trojan.AutoIt.Agent.VQ
MAX	malware (ai score=84)
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	Trojan.AutoIt.CRYPTINJECT.SMA
Rising	PUF.Pack-AutoIt!1.B8E7 (CLASSIC)
Ikarus	Trojan.Win32.Autoit
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	AutoIt/Injector.ESJ!tr
AVG	AutoIt:Injector-JF [Trj]
DeepInstinct	MALICIOUS

How to remove Trojan:AutoIt/Inject.V!MTB?

Trojan:AutoIt/Inject.V!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X