Win32/Injector.Autoit.FAQ removal

The Win32/Injector.Autoit.FAQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Injector.Autoit.FAQ virus can do?

At least one process apparently crashed during execution
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/Injector.Autoit.FAQ?


File Info:
name: 02E562A7D99D481488D5.mlw
path: /opt/CAPEv2/storage/binaries/2723190f42c28cc79ab453f5e5300fad1e1672b920b67b3b07f2e1db09e2644c
crc32: FB8F7069
md5: 02e562a7d99d481488d59e56bce18118
sha1: e342c7dab0dbbf620c650a4d15032d99842847c9
sha256: 2723190f42c28cc79ab453f5e5300fad1e1672b920b67b3b07f2e1db09e2644c
sha512: 4302c4a397a3c8b1dab254e54c799ef19cf177f7cf7da606dd412864aea44d33bf77274017fd03bfed0e7ca7533d33d939216a946afc7b5b522c4ca7ad1afa53
ssdeep: 49152:nAHSDawVZHTVwUTwasXWxyrmwzp/QCQQFJfj2:AHQNVwUTAWemwzp/Qh
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15E85DF0273D1C023FFA3A2738A6AF64557BE796D4133C62F13982CB9BD701A1525E663
sha3_384: f99a69c462161846697f447b26939120a9ec7669122478a5991fbad0cfe8de42d3b17de6426d3bb238efa07d0b4b5645
ep_bytes: e8c8d00000e97ffeffffcccccccccccc
timestamp: 2020-02-04 22:38:51

Version Info:
Translation: 0x0809 0x04b0

Win32/Injector.Autoit.FAQ also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.AutoIT.Agent.AAJ
FireEye	Generic.mg.02e562a7d99d4814
McAfee	Trojan-AitInject.aq
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (D)
ESET-NOD32	a variant of Win32/Injector.Autoit.FAQ
APEX	Malicious
BitDefender	Trojan.AutoIT.Agent.AAJ
Ad-Aware	Trojan.AutoIT.Agent.AAJ
Sophos	Generic ML PUA (PUA)
DrWeb	Trojan.AutoIt.716
TrendMicro	TrojanSpy.AutoIt.NEGASTEAL.SM.hp
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Emsisoft	Trojan.AutoIT.Agent.AAJ (B)
Ikarus	Trojan-Spy.Keylogger.AgentTesla
Antiy-AVL	Trojan/Generic.ASCommon.1B8
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Trojan.AutoIT.Agent.AAJ (2x)
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/AU3.Wacatac.S1079
ALYac	Trojan.AutoIT.Agent.AAJ
MAX	malware (ai score=83)
Malwarebytes	Trojan.MalPack.AutoIt
TrendMicro-HouseCall	TrojanSpy.AutoIt.NEGASTEAL.SM.hp
Rising	Trojan.Obfus/Autoit!1.C045 (CLASSIC)
Fortinet	AutoIt/Agent.AAJ!tr
Cybereason	malicious.7d99d4
Panda	Generic Suspicious

How to remove Win32/Injector.Autoit.FAQ?

Win32/Injector.Autoit.FAQ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X