Win32/Injector.Autoit.EKQ malicious file

The Win32/Injector.Autoit.EKQ file is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Win32/Injector.Autoit.EKQ virus can do?

• Executable code extraction
• Creates RWX memory
• Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
• Reads data out of its own binary image
• The binary likely contains encrypted or compressed data.
• Anomalous binary characteristics

How to determine Win32/Injector.Autoit.EKQ?

General:
Operating System: Windows 7 / 8 / 8.1 / 10
Virus Name: Generic.mg.bf19b9d83c35f2a6


File Info:
Name: dypx.exe
Size: 1142784
Type: PE32 executable (GUI) Intel 80386, for MS Windows
MD5: bf19b9d83c35f2a6a03365c3fcf4135d
SHA1: e6ae36b4bde0d51215d33a4432a95fc3c2465a70
SH256: 9cfbfeea1c8769897ea1b35e658efa43e78a79e13828b54523b7e21d7a273102
 
Version Info:
 [No Data] 

Win32/Injector.Autoit.EKQ also known as:

ALYac	Trojan.GenericKD.32705829
APEX	Malicious
AVG	AutoIt:Injector-JE [Trj]
Ad-Aware	Trojan.GenericKD.32705829
AhnLab-V3	Malware/Win32.Generic.R294758
Alibaba	Trojan:Win32/Crypt.6f46242c
Antiy-AVL	GrayWare/Autoit.Execute.a
Arcabit	Trojan.Generic.D1F30D25
Avast	AutoIt:Injector-JE [Trj]
Avira	TR/AD.Inject.mlwee
BitDefender	Trojan.GenericKD.32705829
BitDefenderTheta	Gen:NN.ZexaCO3.32253.fvW@aqLgN@pi
CAT-QuickHeal	Trojan.MSIL
CrowdStrike	win/malicious_confidence_90% (W)
Cybereason	malicious.4bde0d
Cylance	Unsafe
Cyren	W32/Trojan.DOSZ-2258
DrWeb	Trojan.Inject3.29411
ESET-NOD32	a variant of Win32/Injector.Autoit.EKQ
Emsisoft	Trojan.GenericKD.41898945 (B)
Endgame	malicious (moderate confidence)
F-Secure	Trojan.TR/AD.Inject.mlwee
FireEye	Generic.mg.bf19b9d83c35f2a6
GData	Trojan.GenericKD.32705829
Ikarus	Trojan.Autoit
Invincea	heuristic
K7AntiVirus	Trojan ( 0055996f1 )
K7GW	Trojan ( 0055996f1 )
Kaspersky	Trojan.MSIL.Crypt.hijo
MAX	malware (ai score=84)
Malwarebytes	Trojan.MalPack.AutoIt
McAfee	Artemis!BF19B9D83C35
McAfee-GW-Edition	BehavesLike.Win32.Downloader.tc
MicroWorld-eScan	Trojan.GenericKD.32705829
Microsoft	Trojan:Win32/Phoetel.ST!MTB
NANO-Antivirus	Trojan.Win32.Crypt.gdrbfw
Paloalto	generic.ml
Panda	Trj/CI.A
Qihoo-360	HEUR/QVM10.2.8D0F.Malware.Gen
Rising	Trojan.Obfus/Autoit!1.BD7E (CLASSIC)
SentinelOne	DFI – Malicious PE
Sophos	Mal/Generic-S
Symantec	Packed.Generic.548
TrendMicro	TROJ_FRS.VSNW0FJ19
TrendMicro-HouseCall	TROJ_FRS.VSNW0FJ19
VBA32	Trojan.MSIL.Crypt
VIPRE	Trojan.Win32.Generic!BT
ViRobot	Trojan.Win32.Z.Autoit.1142784
Webroot	W32.Injector.Gen
ZoneAlarm	Trojan.MSIL.Crypt.hijo

How to remove Win32/Injector.Autoit.EKQ?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.