Win64/Injector.FM malicious file

The Win64/Injector.FM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win64/Injector.FM virus can do?

The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Win64/Injector.FM?


File Info:
crc32: F03CF08C
md5: 191889cccd8827cb28b5cf9c3a559366
name: 191889CCCD8827CB28B5CF9C3A559366.mlw
sha1: c1a6bc0e5d66524eaefa935e9d1dca0c9223bead
sha256: 5301e5deb37674296e48d5873862ce32f934fbdfe1a7919f97bddb1138957e35
sha512: 6d3af286eaa1c3051a739edeaa5f5684f31ff0575082bcd1c2155acfa82657b06b70d7aefc55be3dc1f0877cd4ca77b13f9e53720f5123339bf85eb36bfdfcdf
ssdeep: 384:DN+B5AJpV4xUiJtVXa8k4wg2/CqP6g+L7lZ88lVCOy/RBErXN+0cDVmA:cBCH4PtVXa8NEfP4L5Z88lo/cr9+vDF
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
0: [No Data]

Win64/Injector.FM also known as:

K7AntiVirus	Trojan ( 0057e3e71 )
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Cerbu.105049
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/Cryptor.17fc8190
K7GW	Trojan ( 0057e3e71 )
Cybereason	malicious.e5d665
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/Injector.FM
APEX	Malicious
Avast	Win64:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Cryptor.elk
BitDefender	Gen:Variant.Cerbu.105049
MicroWorld-eScan	Gen:Variant.Cerbu.105049
Ad-Aware	Gen:Variant.Cerbu.105049
Sophos	Mal/Generic-S
TrendMicro	Ransom_Cryptor.R002C0WFL21
McAfee-GW-Edition	BehavesLike.Win64.Ardurk.mc
FireEye	Generic.mg.191889cccd8827cb
Emsisoft	Gen:Variant.Cerbu.105049 (B)
Avira	TR/AD.ContiRansom.rawsn
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Cerbu.D19A59
AegisLab	Trojan.Win32.Cryptor.j!c
GData	Gen:Variant.Cerbu.105049
McAfee	Artemis!191889CCCD88
MAX	malware (ai score=81)
TrendMicro-HouseCall	Ransom_Cryptor.R002C0WFL21
Ikarus	Trojan.Win64.Injector
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
AVG	Win64:Malware-gen
Paloalto	generic.ml

How to remove Win64/Injector.FM?

Win64/Injector.FM removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X