Categories: Trojan

AIT:Trojan.Autoit.CGX removal guide

The AIT:Trojan.Autoit.CGX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What AIT:Trojan.Autoit.CGX virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
Reads data out of its own binary image
Drops a binary and executes it
Uses Windows utilities for basic functionality
Sniffs keystrokes
Installs itself for autorun at Windows startup

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine AIT:Trojan.Autoit.CGX?


File Info:
crc32: 27BD5AA5md5: 1a32b66d3257dac6503146bbf4546a36name: 1A32B66D3257DAC6503146BBF4546A36.mlwsha1: 40b52f15dd435872958d453daa25d3d5bb30781asha256: 915aba93ee4bb603d0c98c477fd46f024afa98309d30ec00e05fc0f744fb5fd5sha512: ff747bfd84fe2b4ada9c25d3f5aee3164bc93bd9dd7b5e08617c1857cbda0b012e37ba6ccfcb9823680c97e6aa205fc1bc05eba927e09f5d596ebd88fbe84352ssdeep: 12288:74lsXvtCcmVVXzzn4PJAahPl/QEdIMiVbHydEIJnJWUgaW7olf4s1q9MmCS:74lavt0LkLL9IMixoEgeamxs1q9MmCStype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0809 0x04b0

AIT:Trojan.Autoit.CGX also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	AIT:Trojan.Autoit.CGX
FireEye	Generic.mg.1a32b66d3257dac6
CAT-QuickHeal	TrojanPWS.AutoIt.Zbot.S
ALYac	AIT:Trojan.Autoit.CGX
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 0056e5201 )
BitDefender	AIT:Trojan.Autoit.CGX
K7GW	Trojan ( 0056e5201 )
Cybereason	malicious.d3257d
Baidu	Win32.Trojan-Dropper.Autoit.c
Cyren	W32/AutoIt.EZ.gen!Eldorado
Symantec	Backdoor.Ratenjay
APEX	Malicious
Avast	AutoIt:Runner-AN [Trj]
Kaspersky	Trojan-Dropper.Win32.Autoit.bpz
Alibaba	TrojanDropper:Win32/Obfuscator.b880dea1
NANO-Antivirus	Trojan.Script.AutoIt.dcckyk
Ad-Aware	AIT:Trojan.Autoit.CGX
Emsisoft	AIT:Trojan.Autoit.CGX (B)
F-Secure	Heuristic.HEUR/AGEN.1134155
DrWeb	Trojan.DownLoader11.33366
TrendMicro	TROJ_GEN.R002C0DAV21
McAfee-GW-Edition	BehavesLike.Win32.DownloaderAutoIt.ch
MaxSecure	Trojan.Malware.300983.susgen
Sophos	ML/PE-A + Troj/Autoit-BIF
Ikarus	Trojan-Dropper.Win32.Autoit
Avira	HEUR/AGEN.1134155
MAX	malware (ai score=85)
Microsoft	Backdoor:Win32/Bladabindi!ml
Arcabit	AIT:Trojan.Autoit.CGX
ZoneAlarm	Trojan-Dropper.Win32.Autoit.bpz
GData	AIT:Trojan.Autoit.CGX (2x)
Cynet	Malicious (score: 100)
McAfee	Artemis!1A32B66D3257
VBA32	TrojanDropper.Autoit
Malwarebytes	Generic.Malware/Suspicious
ESET-NOD32	multiple detections
TrendMicro-HouseCall	TROJ_GEN.R002C0DAV21
eGambit	Unsafe.AI_Score_75%
Fortinet	W32/Autoit.AWL!tr
BitDefenderTheta	AI:Packer.74177E1D15
AVG	AutoIt:Runner-AN [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_80% (D)
Qihoo-360	Win32/Worm.AutoIt.HwoCB9sC