Win32/Injector.AYFB (file analysis)

The Win32/Injector.AYFB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Injector.AYFB virus can do?

Executable code extraction
Network activity detected but not expressed in API logs
Attempts to disable UAC
Attempts to modify or disable Security Center warnings
Anomalous binary characteristics

How to determine Win32/Injector.AYFB?


File Info:
crc32: 23AD6227
md5: 9492bfe86f084eff9fd4cf44461952ee
name: 9492BFE86F084EFF9FD4CF44461952EE.mlw
sha1: 4aec3fb89f3e713a2922559ac6d7c7a54e06d874
sha256: 0043d6143285738f4c746ec1550de53676136c0e0b3fca0cb26a1899150fbfd5
sha512: dc19f30e5245eb53cf6053f3208bfc3d2e7f6105d1d1f8e430df889ebb9fd5846a7ecf92b3ba25b8b2bf03aeafb64ca98b7c2ae6984f95fda6ccac2bc0041b9d
ssdeep: 24576:udVAg4rEFuHmS5iYiSSzXHmc7ICq7ou4IBwc/lak:u/Ag4rXHiYiSSzHmYol4IBwuak
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Abronsius
InternalName: Source
FileVersion: 2.00
CompanyName: Abronsius
LegalTrademarks: Abronsius
Comments: Source System
ProductName: Source
ProductVersion: 2.00
FileDescription: Source System
OriginalFilename: Source.exe

Win32/Injector.AYFB also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader26.42194
McAfee	Artemis!9492BFE86F08
CrowdStrike	win/malicious_confidence_60% (D)
K7GW	Trojan ( 004ea2ed1 )
K7AntiVirus	Trojan ( 004ea2ed1 )
ESET-NOD32	a variant of Win32/Injector.AYFB
Avast	Win32:Malware-gen
Cynet	Malicious (score: 99)
NANO-Antivirus	Trojan.Win32.AYFB.doprqg
Sophos	Mal/Generic-S
Comodo	Malware@#2m4svvat81ab7
BitDefenderTheta	AI:Packer.5532361F20
VIPRE	Trojan.Win32.Generic!BT
SentinelOne	Static AI – Malicious PE
Avira	TR/Spy.Gen
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
Yandex	Trojan.Injector!WWsch2TDQf8
Ikarus	Trojan.Win32.Injector
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/AYFB!tr
AVG	Win32:Malware-gen

How to remove Win32/Injector.AYFB?

Win32/Injector.AYFB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X