Win32/Injector.Autoit.FBV malicious file

Malware Removal

The Win32/Injector.Autoit.FBV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

ribbon

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
THANK YOU!
DOWNLOAD NOW
On Going Offer

What Win32/Injector.Autoit.FBV virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • The binary likely contains encrypted or compressed data.
  • Attempts to remove evidence of file being downloaded from the Internet
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Steals private information from local Internet browsers
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Harvests information related to installed mail clients
  • Collects information to fingerprint the system

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Injector.Autoit.FBV?


File Info:

crc32: 00F25CC0
md5: cf53888a1a4a2a69d07aad6ef981c988
name: brav.exe
sha1: 11979cdc05a3e6c67ddf7c1b2379c353266158c5
sha256: 4c03a72288895cd13a8cbabdcb20212488ba70ba7a352b2f0a3bfb9f8e65ab25
sha512: a276a9fb3ce5b7941af614a61d45bd9ac0a8e121ff4ba2ebc213c83f9d78cbd02339d0d703907bbc644e8f613ee8fa027d4212a5663f6b3e42a019eb20da73f5
ssdeep: 24576:/AHnh+eWsN3skA4RV1Hom2KXSmdanrNvZPVmpAjSEZ4Y1bTAgfsf0z5:ih+ZkldoPKi2anr3dmpOeYxTA8u4
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Win32/Injector.Autoit.FBV also known as:

MicroWorld-eScanTrojan.AutoIT.Agent.AAJ
Qihoo-360HEUR/QVM10.1.3405.Malware.Gen
McAfeeArtemis!CF53888A1A4A
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan ( 700000111 )
BitDefenderTrojan.AutoIT.Agent.AAJ
K7GWTrojan ( 700000111 )
ArcabitTrojan.AutoIT.Agent.AAJ
TrendMicroTrojan.Win32.WACATAC.THBABBO
F-ProtW32/AutoIt.KF.gen!Eldorado
ESET-NOD32a variant of Win32/Injector.Autoit.FBV
APEXMalicious
KasperskyHEUR:Trojan.Win32.Generic
AlibabaTrojan:Win32/autoit.ali2000008
RisingTrojan.Obfus/Autoit!1.C045 (CLASSIC)
Endgamemalicious (high confidence)
EmsisoftTrojan.AutoIT.Agent.AAJ (B)
F-SecureTrojan.TR/Autoit.rrfir
DrWebTrojan.AutoIt.727
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Downloader.tc
FortinetAutoIt/Injector.EZY!tr
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.cf53888a1a4a2a69
IkarusTrojan-Spy.Keylogger.AgentTesla
CyrenW32/AutoIt.KF.gen!Eldorado
MAXmalware (ai score=82)
MicrosoftTrojan:Win32/Predator.BC!MTB
ZoneAlarmHEUR:Trojan.Win32.Generic
AhnLab-V3Trojan/Win32.RL_AutoInj.R272810
Acronissuspicious
TrendMicro-HouseCallTrojan.Win32.WACATAC.THBABBO
TencentWin32.Trojan.Generic.Tayl
YandexTrojan.AvsArher.bS9LKk
GDataTrojan.AutoIT.Agent.AAJ
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_80% (W)

How to remove Win32/Injector.Autoit.FBV?

Win32/Injector.Autoit.FBV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment