Categories: Malware

Win32/Injector.Autoit.EVZ removal

The Win32/Injector.Autoit.EVZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.Autoit.EVZ virus can do?

Executable code extraction
Creates RWX memory
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Win32/Injector.Autoit.EVZ?


File Info:
crc32: 93A86676md5: 0c93a2504793120267ff3e4fc293c1e0name: new.exesha1: a3507b5f5eb3bf20bf566afd9a3092ab163e2bdasha256: fcb66e45781c428a470cf0d5e2ddd9714c0b929ee95e955c523f71b25226d32esha512: 19b8341af920cd73a4a4e420e791380e83976818ecc4a251a842666681c228d7dba8f69f29b848438fa49d68765d2956e97cf2e1e5b34b37ab94d71f6931d366ssdeep: 24576:R2rT5JibBsR1YAcUSWcPsPQcVnJtCaOkInzZ3dZz7mHFKiuj6O3TTAQsPPp3Dv:gpJ22R1rcUWPsPFVrCaOkInNziHFlu+type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0809 0x04b0

Win32/Injector.Autoit.EVZ also known as:

MicroWorld-eScan	Trojan.GenericKD.32938567
Qihoo-360	Win32/Trojan.PSW.1b7
McAfee	Artemis!0C93A2504793
Malwarebytes	Trojan.MalPack.AutoIt.Generic
Sangfor	Malware
BitDefender	Trojan.GenericKD.32938567
K7GW	Trojan ( 0055eb291 )
Cybereason	malicious.f5eb3b
Invincea	heuristic
ESET-NOD32	a variant of Win32/Injector.Autoit.EVZ
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan-PSW.Win32.Azorult.aizw
Endgame	malicious (high confidence)
Emsisoft	Trojan.GenericKD.32938567 (B)
F-Secure	Trojan.TR/AD.MoksSteal.jlgvs
Zillya	Trojan.GenericTKA.Win32.190
McAfee-GW-Edition	BehavesLike.Win32.Downloader.tc
Fortinet	AutoIt/Injector.ESJ!tr
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.0c93a25047931202
Sophos	Mal/Generic-S
Jiangmin	Trojan.Pasta.ahk
Webroot	W32.Trojan.Gen
Avira	TR/AD.MoksSteal.jlgvs
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Win32.Pasta
Arcabit	Trojan.Generic.D1F69A47
ZoneAlarm	Trojan-PSW.Win32.Azorult.aizw
Microsoft	Trojan:Win32/Wacatac.B!ml
VBA32	Trojan.SelfDel
Ad-Aware	Trojan.GenericKD.32938567
Cylance	Unsafe
TrendMicro-HouseCall	TROJ_GEN.R020H06AC20
Rising	Trojan.Obfus/Autoit!1.C075 (CLASSIC)
Ikarus	Trojan-Spy.Keylogger.AgentTesla
eGambit	Unsafe.AI_Score_77%
AVG	FileRepMalware
Avast	FileRepMalware
CrowdStrike	win/malicious_confidence_70% (W)
MaxSecure	Trojan.Malware.300983.susgen