Malware

Win32/Injector.Autoit.FYJ removal guide

Malware Removal

The Win32/Injector.Autoit.FYJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Injector.Autoit.FYJ virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode patterns malware family
  • Binary file triggered YARA rule
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Win32/Injector.Autoit.FYJ?


File Info:

name: 2D76B381F17392F41ACC.mlw
path: /opt/CAPEv2/storage/binaries/22ab36fcc85514cfc381fa8f0bbd4912b1ca51710e64688b9b497ed5be4c83ce
crc32: 08B92004
md5: 2d76b381f17392f41acc2aab32ec5876
sha1: dd338c9305cc6dd9a94c412551ee5aeb3af8a6a2
sha256: 22ab36fcc85514cfc381fa8f0bbd4912b1ca51710e64688b9b497ed5be4c83ce
sha512: cc2d8452ad6e4bb8472d7aecf399af0cbceb10f7af439cb35a6e9d7cd6316dc159b9dc9d182ca715699391d1523aa19717439ff669f9967c3d49a003eb755b24
ssdeep: 24576:pAHnh+eWsN3skA4RV1Hom2KXMmHabef4bLTD5:wh+ZkldoPK8YabQ4XZ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FE358C3263918336FFAB9D73DB5DB20D56BC6D250123852FD29C2F79A9F01A1122D263
sha3_384: d98ccf62bf375e9bd7c2ad3f42425381d8156a382a6e8f78a14f4c291e2b1419a2a768e7a1caa825ff8130494373654b
ep_bytes: e8c8d00000e97ffeffffcccccccccccc
timestamp: 2024-04-28 23:58:53

Version Info:

FileVersion: 0.6.5.5
Translation: 0x0809 0x04b0

Win32/Injector.Autoit.FYJ also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Autoit.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.72579610
FireEyeTrojan.GenericKD.72579610
SkyhighBehavesLike.Win32.TrojanAitInject.th
McAfeeArtemis!2D76B381F173
MalwarebytesTrojan.Injector
SangforVirus.Win32.Save.a
AlibabaTrojan:Win32/ShellcodeCrypter.7747938a
K7GWRiskware ( 00584baa1 )
K7AntiVirusRiskware ( 00584baa1 )
VirITTrojan.Win32.Dnldr28.DN
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/Injector.Autoit.FYJ
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan.Win32.Strab.idw
BitDefenderTrojan.GenericKD.72579610
EmsisoftTrojan.GenericKD.72579610 (B)
F-SecureTrojan.TR/AD.ShellcodeCrypter.dzpsy
VIPRETrojan.GenericKD.72579610
SophosMal/Generic-S
IkarusTrojan.Autoit
GoogleDetected
AviraTR/AD.ShellcodeCrypter.dzpsy
VaristW32/AutoIt.YE.gen!Eldorado
KingsoftWin32.Trojan.Strab.idw
ArcabitTrojan.Generic.D4537A1A
ViRobotTrojan.Win.Z.Injector.1064448
ZoneAlarmTrojan.Win32.Strab.idw
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win.Sabsik.C5614177
VBA32Trojan-Downloader.Autoit.gen
ALYacTrojan.GenericKD.72579610
DeepInstinctMALICIOUS
Cylanceunsafe
TencentWin32.Trojan.Strab.Etgl
MAXmalware (ai score=83)
FortinetAutoIt/Injector.AAE!tr
alibabacloudTrojan:Win/Strab.ibx

How to remove Win32/Injector.Autoit.FYJ?

Win32/Injector.Autoit.FYJ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment