Malware

Win32/Injector.Autoit.FAK malicious file

Malware Removal

The Win32/Injector.Autoit.FAK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Injector.Autoit.FAK virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself

How to determine Win32/Injector.Autoit.FAK?


File Info:

crc32: A5ADAF93
md5: 9f87dadf4d0571f3e441c9d5911864c8
name: file.exe
sha1: 832dfa671b4be3085e997ffd46e0bc243f1f74b8
sha256: 876da78bf436f68353ab2cf07e68a195843e19c147fdef83add2efc1352e66f6
sha512: 02750caf93c3017ab0b00993b680265cf6166b377379a8ba8f63ee1acb02d528a87b1b54502dfb97fdd31a3d13feda0621d827e238490b2a6c537252ef8b7580
ssdeep: 24576:tu6J33O0c+JY5UZ+XC0kGso6Fa4yB9TqTChdADZayWHWY:fu0c++OCvkGs9Fa4ioOhdAD7Y
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Win32/Injector.Autoit.FAK also known as:

DrWebTrojan.AutoIt.715
FireEyeGeneric.mg.9f87dadf4d0571f3
Qihoo-360HEUR/QVM10.1.0719.Malware.Gen
McAfeeArtemis!9F87DADF4D05
K7AntiVirusTrojan ( 700000111 )
K7GWTrojan ( 700000111 )
Invinceaheuristic
CyrenW32/AutoIt.IJ.gen!Eldorado
SymantecPacked.Generic.548
ESET-NOD32a variant of Win32/Injector.Autoit.FAK
APEXMalicious
McAfee-GW-EditionBehavesLike.Win32.Downloader.tc
FortinetAutoIt/Injector.EZY!tr
Trapminemalicious.high.ml.score
IkarusTrojan-Spy.Keylogger.AgentTesla
F-ProtW32/AutoIt.IJ.gen!Eldorado
Endgamemalicious (high confidence)
MicrosoftTrojan:Win32/Wacatac.D!ml
AhnLab-V3Trojan/Win32.AutoInj.R279467
RisingTrojan.Obfus/Autoit!1.C075 (CLASSIC)
MaxSecureTrojan.Malware.300983.susgen

How to remove Win32/Injector.Autoit.FAK?

Win32/Injector.Autoit.FAK removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment