Win32/Injector.Autoit.FPG removal

The Win32/Injector.Autoit.FPG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.Autoit.FPG virus can do?

• Sample contains Overlay data
• Presents an Authenticode digital signature
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Attempts to modify proxy settings

How to determine Win32/Injector.Autoit.FPG?

File Info:
name: 19B9C14AFEFC0B8CDCFD.mlw
path: /opt/CAPEv2/storage/binaries/c867b40a06f45e25b0c5bdbc45bc5608f1632b48849561b244b2e98248751c55
crc32: 07E3F248
md5: 19b9c14afefc0b8cdcfd6c4e37289e4f
sha1: e2916ce981211d0f7d98032befb2f51fd1ced950
sha256: c867b40a06f45e25b0c5bdbc45bc5608f1632b48849561b244b2e98248751c55
sha512: b88ac20fb99913cac33ad8327bac9498d749c36b966fb29dfab7fe858876ab4249754254e955d30495fbb9ef8ac78cefdb35922f19f863a41dac9ad9f757256b
ssdeep: 393216:h1HcDiCJQ6Au1RpeQ/9CVX496V4tcpbsi68m9:hVcDl+6Amch4w6h
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D8F6333364624D23D5F2047FB415F1306E68B32F1B939A9AE3C0AD5B7DA80815EB3967
sha3_384: 7ec914035165eb145facaf523c4431e0ee35cb3426bfe9ab40488a4c6950a40de0a2a9f4c279d21aaeb36976c9b9a4bf
ep_bytes: e83a050000e97afeffffcccccccccc8b
timestamp: 2019-09-17 05:33:38

Version Info:
CompanyName: CloudVeil Technology, Inc.
FileDescription: CloudVeil for Windows
FileVersion: 2.2.20
InternalName: setup
LegalCopyright: Copyright (c) CloudVeil Technology, Inc.. All rights reserved.
OriginalFilename: CloudVeilInstaller-x64.exe
ProductName: CloudVeil for Windows
ProductVersion: 2.2.20
Translation: 0x0409 0x04e4

Win32/Injector.Autoit.FPG also known as:

How to remove Win32/Injector.Autoit.FPG?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.