AIT:Trojan.Autoit.CLC (B) malicious file

The AIT:Trojan.Autoit.CLC (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What AIT:Trojan.Autoit.CLC (B) virus can do?

Sample contains Overlay data
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary file triggered YARA rule
Anomalous binary characteristics

How to determine AIT:Trojan.Autoit.CLC (B)?


File Info:
name: E5F2630EB153DB5AFD06.mlw
path: /opt/CAPEv2/storage/binaries/c1b9b7ace514efedfd6b660cd89e30efe719a78ad05898b51cd2655fb4ffe3ca
crc32: 46970CC0
md5: e5f2630eb153db5afd062bb169cc568e
sha1: 62ffd22d634a1335bb09b5f0f38bdd274c11f201
sha256: c1b9b7ace514efedfd6b660cd89e30efe719a78ad05898b51cd2655fb4ffe3ca
sha512: 42dc09a5476524b68bc43e74fddb329b921f6a86c2d47a6217a89d67fc8fa7709824e7bfe7bc90717a1dd95f09575f7bf79b2cb1e58d48529e3f74e49ecff868
ssdeep: 98304:xdnVTrptymuGZnA+gw0eQdNPi7O8GONrpUWEFeKe3cr3DsP:nRKmuGZA+5vQzmJpUWEFc2DsP
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15436221373ED8390C3725173BA66BB06AE7B7C250A64F49B2FD8093CED10661526E673
sha3_384: f7a3ead99977677bdadf0ee8c1e61c7a2e9a727543c9e2276ffc8aa65e57fbfa2de2bf7e7858d16f8e522c3e8e84c593
ep_bytes: e897cf0000e97ffeffffcccccccccccc
timestamp: 2014-04-02 00:42:06

Version Info:
0: [No Data]

AIT:Trojan.Autoit.CLC (B) also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Autoit.4!c
Skyhigh	BehavesLike.Win32.PUPXVW.rc
ALYac	AIT:Trojan.Autoit.CLC
VIPRE	AIT:Trojan.Autoit.CLC
Sangfor	Trojan.Win32.Autoit.Vj8r
BitDefender	AIT:Trojan.Autoit.CLC
CrowdStrike	win/malicious_confidence_70% (D)
BitDefenderTheta	AI:Packer.1D866E3A15
Symantec	Trojan.Gen.MBT
Elastic	malicious (moderate confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
MicroWorld-eScan	AIT:Trojan.Autoit.CLC
Sophos	Generic ML PUA (PUA)
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.e5f2630eb153db5a
Emsisoft	AIT:Trojan.Autoit.CLC (B)
SentinelOne	Static AI – Suspicious PE
GData	AIT:Trojan.Autoit.CLC
Kingsoft	malware.kb.a.990
Arcabit	AIT:Trojan.Autoit.CLC
Microsoft	Program:Win32/Wacapew.C!ml
Google	Detected
MAX	malware (ai score=84)
DeepInstinct	MALICIOUS
Ikarus	Worm.VBS.Jenxcus
Cybereason	malicious.eb153d
alibabacloud	Trojan:Win/CLC

How to remove AIT:Trojan.Autoit.CLC (B)?

AIT:Trojan.Autoit.CLC (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X