Malware

Win32/Injector.Autoit.FIG removal

Malware Removal

The Win32/Injector.Autoit.FIG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Injector.Autoit.FIG virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Win32/Injector.Autoit.FIG?


File Info:

crc32: 60E6288B
md5: 266ebb2786497d9e1590184948251a03
name: siihost.exe
sha1: a465e86a93bdbb947a55050fe40a7e33b7f447a2
sha256: 54df35e07608753c2a4578cb866ae9fbc8c3f422b21427b6af9eb084781da7db
sha512: 56eddcaae88d36ab570a47c5e0082941ad8a0f9025b184eb24b749ae3beff457e2952c63cdc130da3bc3ed458ca6d6701d68f850e5cbe651d3f323e981e2761e
ssdeep: 24576:2tb20pkaCqT5TBWgNQ7avQ0Xnp4aQTboXWhXYyOZADYptlR6A:jVg5tQ7avBnp4dNXYyOZ0Y35
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Win32/Injector.Autoit.FIG also known as:

Qihoo-360HEUR/QVM10.1.8C32.Malware.Gen
SymantecAUT.Heuristic!gen5
APEXMalicious
KasperskyUDS:DangerousObject.Multi.Generic
RisingTrojan.Obfus/Autoit!1.C646 (CLASSIC)
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.TrojanAitInject.tc
FireEyeGeneric.mg.266ebb2786497d9e
IkarusTrojan.Autoit
CyrenW32/AutoIt.OM.gen!Eldorado
Endgamemalicious (high confidence)
ZoneAlarmUDS:DangerousObject.Multi.Generic
MicrosoftTrojan:Win32/Wacatac.C!ml
Acronissuspicious
McAfeeArtemis!266EBB278649
MalwarebytesTrojan.MalPack.AutoIt.Generic
ESET-NOD32a variant of Win32/Injector.Autoit.FIG
eGambitUnsafe.AI_Score_86%
FortinetAutoIt/Injector.FIC!tr
Cybereasonmalicious.a93bdb
Paloaltogeneric.ml
MaxSecureTrojan.Malware.300983.susgen

How to remove Win32/Injector.Autoit.FIG?

Win32/Injector.Autoit.FIG removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment