Win32/Injector.Autoit.FWR (file analysis)

The Win32/Injector.Autoit.FWR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.Autoit.FWR virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Installs itself for autorun at Windows startup
• CAPE detected the shellcode patterns malware family
• Binary file triggered YARA rule
• Yara detections observed in process dumps, payloads or dropped files

How to determine Win32/Injector.Autoit.FWR?

File Info:
name: D32F1DC388917A4666F6.mlw
path: /opt/CAPEv2/storage/binaries/3b291f96d950dace5033a39f03ba5d69c090601c0c0ff77a80366c0623f1f25d
crc32: 3E8DE7B7
md5: d32f1dc388917a4666f69b2789522d07
sha1: 1597df03e617fd2a4bba3deac548345398bee702
sha256: 3b291f96d950dace5033a39f03ba5d69c090601c0c0ff77a80366c0623f1f25d
sha512: fe90174014c2fff39b233c2cf11cd0afefd32385f80e05eed1e765b7500705f4172aace6a0e4fcf17c17e9ac7943a6a3e8d107432e771d60b2ccc0b1d5824931
ssdeep: 24576:0qDEvCTbMWu7rQYlBQcBiT6rprG8aO1AcLP0Zv+wmZcb0mpl:0TvC/MTQYxsWR7aO1ACPAvrYC
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CA55C00273D1C022FF9B92734F5AF6515BBC69260123A61F13A81DB9BE701B1563E7A3
sha3_384: 34f72d8b165f3ebd423f2f297fb323e2f5bb9af6273f3ec20db1a48b9dd30bf3e00900fa92562bb7d769038445a49809
ep_bytes: e86e050000e97afeffff558bec56ff75
timestamp: 2024-04-03 09:19:11

Version Info:
FileVersion: 6.1.4.1
Translation: 0x0809 0x04b0

Win32/Injector.Autoit.FWR also known as:

How to remove Win32/Injector.Autoit.FWR?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.