AIT.Heur.VictoryGate.1.F424CA84.Gen (B) information

The AIT.Heur.VictoryGate.1.F424CA84.Gen (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What AIT.Heur.VictoryGate.1.F424CA84.Gen (B) virus can do?

Authenticode signature is invalid
Yara detections observed in process dumps, payloads or dropped files

How to determine AIT.Heur.VictoryGate.1.F424CA84.Gen (B)?


File Info:
name: 634BC1A3ED06D481D258.mlw
path: /opt/CAPEv2/storage/binaries/476df81faf41431935e20c5590cd6508d892b977e5ada02186db23b7ad331f9b
crc32: 6DFD32D7
md5: 634bc1a3ed06d481d25818e2a8c2b2b9
sha1: ac36e47dc15202deebc525b8299356e1c598d5a2
sha256: 476df81faf41431935e20c5590cd6508d892b977e5ada02186db23b7ad331f9b
sha512: f808cf5b8953468e555db167e727bb679bcbd603eda62b653d9f7a1a1a29514ae712428e4af8110730b2ee630bb35523eadc247097915c6878c76ae106ca3ef5
ssdeep: 12288:hCdOy3vVrKxR5CXbNjAOxK/j2n+4YG/6c1mFFja3mXgcjfRlgsUBgaMrvQ:hCdxte/80jYLT3U1jfsWaMrvQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EF058C2273DDC360CB669173BF69B3016EBF7C650630B85B2F881D79A960171262D7A3
sha3_384: 111a02044a5dfabd5f957e7963d00d1aae445ebce0356b868c055fbafa08887ca590809313ab552d4aa7fd9b26f792bb
ep_bytes: e8b8d00000e97ffeffffcccccccccccc
timestamp: 2023-08-09 23:17:21

Version Info:
CompanyName: hZCuOQuLu
FileVersion: 0.0.0.0
Translation: 0x0809 0x04b0

AIT.Heur.VictoryGate.1.F424CA84.Gen (B) also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.AutoIt.4!c
MicroWorld-eScan	AIT.Heur.VictoryGate.1.F424CA84.Gen
FireEye	AIT.Heur.VictoryGate.1.F424CA84.Gen
CAT-QuickHeal	Trojan.AutoIt.Worm.A
Skyhigh	BehavesLike.Win32.Trojanaitinject.ch
McAfee	Artemis!634BC1A3ED06
Cylance	unsafe
Sangfor	Virus.Win32.Save.a
K7AntiVirus	Trojan ( 0054bc841 )
Alibaba	Trojan:Win32/AutoitShellInj.6f4788fa
K7GW	Trojan ( 0054bc841 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.MulDrop8.HPR
Symantec	Trojan.Gen.2
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Autoit.OGC
APEX	Malicious
Kaspersky	UDS:Trojan.Script.Generic
BitDefender	AIT.Heur.VictoryGate.1.F424CA84.Gen
Avast	AutoIt:Runner-BG [Trj]
Tencent	Trojan.Win32.Autoit.404506
Sophos	Troj/Autoit-CPL
F-Secure	Worm.WORM/FakeExt.Gen8
DrWeb	Trojan.MulDrop8.5139
VIPRE	AIT.Heur.VictoryGate.1.F424CA84.Gen
TrendMicro	Trojan.AutoIt.VICTORYGATE.SM
Emsisoft	AIT.Heur.VictoryGate.1.F424CA84.Gen (B)
Ikarus	Trojan.Win32.Crypt
GData	AIT.Heur.VictoryGate.1.F424CA84.Gen (2x)
Webroot	W32.Malware.gen
Google	Detected
Avira	WORM/FakeExt.Gen8
Varist	W32/AutoIt.SQ.gen!Eldorado
Xcitium	TrojWare.Win32.Autoit.OGH@8hon62
Arcabit	AIT.Heur.VictoryGate.1.F424CA84.Gen [many]
ZoneAlarm	HEUR:Trojan.Script.Generic
Microsoft	Trojan:Win32/AutoitShellInj.A!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Starter.R241379
MAX	malware (ai score=81)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/CI.A
TrendMicro-HouseCall	Trojan.AutoIt.VICTORYGATE.SM
Rising	Trojan.Agent/Autoit!1.BB61 (CLASSIC)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	AutoIt/Agent.OGC!tr
AVG	AutoIt:Runner-BG [Trj]
DeepInstinct	MALICIOUS

How to remove AIT.Heur.VictoryGate.1.F424CA84.Gen (B)?

AIT.Heur.VictoryGate.1.F424CA84.Gen (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X