The Win32/Injector.Autoit.EKQ file is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.
What Win32/Injector.Autoit.EKQ virus can do?
- Executable code extraction
- Creates RWX memory
- Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
- Reads data out of its own binary image
- The binary likely contains encrypted or compressed data.
- Anomalous binary characteristics
How to determine Win32/Injector.Autoit.EKQ?
General:
Operating System: Windows 7 / 8 / 8.1 / 10 Virus Name: Generic.mg.bf19b9d83c35f2a6
File Info:
Name: dypx.exe
Size: 1142784
Type: PE32 executable (GUI) Intel 80386, for MS Windows
MD5: bf19b9d83c35f2a6a03365c3fcf4135d
SHA1: e6ae36b4bde0d51215d33a4432a95fc3c2465a70
SH256: 9cfbfeea1c8769897ea1b35e658efa43e78a79e13828b54523b7e21d7a273102
Version Info:
[No Data]
Win32/Injector.Autoit.EKQ also known as:
| ALYac | Trojan.GenericKD.32705829 |
| APEX | Malicious |
| AVG | AutoIt:Injector-JE [Trj] |
| Ad-Aware | Trojan.GenericKD.32705829 |
| AhnLab-V3 | Malware/Win32.Generic.R294758 |
| Alibaba | Trojan:Win32/Crypt.6f46242c |
| Antiy-AVL | GrayWare/Autoit.Execute.a |
| Arcabit | Trojan.Generic.D1F30D25 |
| Avast | AutoIt:Injector-JE [Trj] |
| Avira | TR/AD.Inject.mlwee |
| BitDefender | Trojan.GenericKD.32705829 |
| BitDefenderTheta | Gen:NN.ZexaCO3.32253.fvW@aqLgN@pi |
| CAT-QuickHeal | Trojan.MSIL |
| CrowdStrike | win/malicious_confidence_90% (W) |
| Cybereason | malicious.4bde0d |
| Cylance | Unsafe |
| Cyren | W32/Trojan.DOSZ-2258 |
| DrWeb | Trojan.Inject3.29411 |
| ESET-NOD32 | a variant of Win32/Injector.Autoit.EKQ |
| Emsisoft | Trojan.GenericKD.41898945 (B) |
| Endgame | malicious (moderate confidence) |
| F-Secure | Trojan.TR/AD.Inject.mlwee |
| FireEye | Generic.mg.bf19b9d83c35f2a6 |
| GData | Trojan.GenericKD.32705829 |
| Ikarus | Trojan.Autoit |
| Invincea | heuristic |
| K7AntiVirus | Trojan ( 0055996f1 ) |
| K7GW | Trojan ( 0055996f1 ) |
| Kaspersky | Trojan.MSIL.Crypt.hijo |
| MAX | malware (ai score=84) |
| Malwarebytes | Trojan.MalPack.AutoIt |
| McAfee | Artemis!BF19B9D83C35 |
| McAfee-GW-Edition | BehavesLike.Win32.Downloader.tc |
| MicroWorld-eScan | Trojan.GenericKD.32705829 |
| Microsoft | Trojan:Win32/Phoetel.ST!MTB |
| NANO-Antivirus | Trojan.Win32.Crypt.gdrbfw |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Qihoo-360 | HEUR/QVM10.2.8D0F.Malware.Gen |
| Rising | Trojan.Obfus/Autoit!1.BD7E (CLASSIC) |
| SentinelOne | DFI – Malicious PE |
| Sophos | Mal/Generic-S |
| Symantec | Packed.Generic.548 |
| TrendMicro | TROJ_FRS.VSNW0FJ19 |
| TrendMicro-HouseCall | TROJ_FRS.VSNW0FJ19 |
| VBA32 | Trojan.MSIL.Crypt |
| VIPRE | Trojan.Win32.Generic!BT |
| ViRobot | Trojan.Win32.Z.Autoit.1142784 |
| Webroot | W32.Injector.Gen |
| ZoneAlarm | Trojan.MSIL.Crypt.hijo |
How to remove Win32/Injector.Autoit.EKQ?
- Download and install GridinSoft Anti-Malware.
- Open GridinSoft Anti-Malware and perform a “Standard scan“.
- “Move to quarantine” all items.
- Open “Tools” tab – Press “Reset Browser Settings“.
- Select proper browser and options – Click “Reset”.
- Restart your computer.
Leave a Comment