Malware

About “Win32/Injector.Autoit.EMA” infection

Malware Removal

The Win32/Injector.Autoit.EMA file is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Win32/Injector.Autoit.EMA virus can do?

  • Reads data out of its own binary image
  • Anomalous binary characteristics

How to determine Win32/Injector.Autoit.EMA?


General:

Operating System: Windows 7 / 8 / 8.1 / 10 Virus Name: Trj/CI.A

File Info:

Name: px.exe

Size: 1124352

Type: PE32 executable (GUI) Intel 80386, for MS Windows

MD5: 062320679a253df4d37961a6ce5b9870

SHA1: 5e3d73c7d48d1b85deb28f1120e76a3a8fb683ae

SH256: ddc1ca6b9cabf78dd490c8ac27ba16fdbf70dc481443e08d63c3a2edcbf6ad36

Version Info:

[No Data]

Win32/Injector.Autoit.EMA also known as:

ALYacTrojan.Agent.Wacatac
AVGWin32:Trojan-gen
Ad-AwareTrojan.GenericKD.41960013
AegisLabTrojan.Win32.Malicious.4!c
AhnLab-V3Win-Trojan/Autoinj03.Exp
AlibabaTrojan:MSIL/Crypt.a46ed1bf
Antiy-AVLTrojan/Generic.ASVCS3S.1E5
ArcabitTrojan.Generic.D280424D
AvastWin32:Trojan-gen
AviraHEUR/AGEN.1044318
BitDefenderTrojan.GenericKD.41960013
BitDefenderThetaGen:NN.ZexaCO3.32250.evW@aSR7emki
CAT-QuickHealTrojan.Wacatac
CrowdStrikewin/malicious_confidence_80% (W)
Cybereasonmalicious.7d48d1
CylanceUnsafe
CyrenW32/Trojan.ZWHF-2945
DrWebTrojan.DownLoader30.31038
ESET-NOD32a variant of Win32/Injector.Autoit.EMA
EmsisoftTrojan.GenericKD.41960013 (B)
Endgamemalicious (high confidence)
F-SecureHeuristic.HEUR/AGEN.1044318
FireEyeGeneric.mg.062320679a253df4
FortinetAutoIt/Injector.EME!tr
GDataTrojan.GenericKD.41960013
Invinceaheuristic
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
KasperskyTrojan.MSIL.Crypt.hitp
MAXmalware (ai score=82)
MalwarebytesTrojan.MalPack.AutoIt
MaxSecureTrojan.Malware.1728101.susgen
McAfeeArtemis!062320679A25
McAfee-GW-EditionBehavesLike.Win32.Downloader.th
MicroWorld-eScanTrojan.GenericKD.41960013
MicrosoftTrojan:Win32/Tiggre!rfn
NANO-AntivirusTrojan.Script.Vbs-heuristic.druvzi
Paloaltogeneric.ml
PandaTrj/CI.A
Qihoo-360Win32/Trojan.e9f
RisingTrojan.Obfus/Autoit!1.BD7E (CLASSIC)
SentinelOneDFI – Malicious PE
SophosMal/Generic-S
SymantecPacked.Generic.548
TrendMicroTROJ_GEN.R015C0PJT19
TrendMicro-HouseCallTROJ_GEN.R015C0PJT19
VIPRETrojan.Win32.Generic!BT
ViRobotTrojan.Win32.Z.Wacatac.1124352
ZoneAlarmTrojan.MSIL.Crypt.hitp

How to remove Win32/Injector.Autoit.EMA?

Win32/Injector.Autoit.EMA removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment