Trojan

About “Dropped:Trojan.Autorun.LN” infection

Malware Removal

The Dropped:Trojan.Autorun.LN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Dropped:Trojan.Autorun.LN virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Dropped:Trojan.Autorun.LN?


File Info:

crc32: D34C8086
md5: 3c1789c36303f801e147c328dddea82a
name: 3C1789C36303F801E147C328DDDEA82A.mlw
sha1: d542a591a35bdded1a2ddc8aec5accf93c66bfdf
sha256: 659f73317715fc58bbf29cac9d59eb1f491555bc4d3e470ea101f80b56002309
sha512: ba4816ab2d9cd6a054953d1e57feed176d0a6f92b3b2969b9f4f9d9af71e3245e049c32e13ace98b9e7fa1113df7c67dfc1081b54245254030bd1f0dd9df29ae
ssdeep: 768:Qpj3FuV9UqrH31ARf1zBmQzTGfmgyqMJWAEoU:Qt3GU0gf1zwQVgnVAEoU
type: PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed

Version Info:

Translation: 0x0409 0x04b0
ProductVersion: 1.00
InternalName: System
FileVersion: 1.00
OriginalFilename: System.exe
ProductName: Hav_online

Dropped:Trojan.Autorun.LN also known as:

BkavW32.SecretCNC.Heur
K7AntiVirusTrojan ( 0040f6881 )
Elasticmalicious (high confidence)
DrWebWin32.HLLW.Autoruner.6545
ClamAVWin.Trojan.Agent-34478
McAfeeArtemis!3C1789C36303
CylanceUnsafe
ZillyaWorm.AutoRun.Win32.70390
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 0040f6881 )
Cybereasonmalicious.36303f
SymantecW32.SillyFDC
ESET-NOD32a variant of Win32/AutoRun.VB.VO
APEXMalicious
AvastWin32:Banload-ETR [Trj]
CynetMalicious (score: 100)
KasperskyWorm.Win32.AutoRun.dzk
BitDefenderDropped:Trojan.Autorun.LN
NANO-AntivirusTrojan.Win32.AutoRun.tvkq
ViRobotWorm.Win32.Autorun.217600
MicroWorld-eScanDropped:Trojan.Autorun.LN
TencentTrojan.Win32.FakeFolder.pa
Ad-AwareDropped:Trojan.Autorun.LN
SophosMal/Generic-R + W32/VB-DZT
ComodoWorm.Win32.Autorun.eb0@13re4o
F-SecureTrojan.TR/Crypt.PEPM.Gen
BitDefenderThetaAI:Packer.7ADF4DC81D
VIPRETrojan.Win32.Generic.pak!cobra
TrendMicroWORM_OTORUN.SMI
McAfee-GW-EditionBehavesLike.Win32.Swisyn.qm
FireEyeGeneric.mg.3c1789c36303f801
EmsisoftDropped:Trojan.Autorun.LN (B)
SentinelOneStatic AI – Malicious PE
JiangminWorm/AutoRun.amum
AviraTR/Crypt.PEPM.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLWorm/Win32.AutoRun
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ArcabitTrojan.Autorun.LN
SUPERAntiSpywareTrojan.Agent/Gen-AutRun
ZoneAlarmWorm.Win32.AutoRun.dzk
GDataDropped:Trojan.Autorun.LN
AhnLab-V3HEUR/Fakon.mwf.X1381
Acronissuspicious
VBA32Worm.Autorun
MAXmalware (ai score=88)
MalwarebytesMalware.Heuristic.1001
PandaW32/Autorun.JIV.worm
TrendMicro-HouseCallWORM_OTORUN.SMI
RisingMalware.Heuristic!ET#89% (RDMK:cmRtazreUu4QCtZ3HB+GpvKUZ3yY)
YandexWorm.AutoRun!RIOdQ/DFGyg
IkarusWorm.Win32.VB
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/AutoRun.DZK!worm
AVGWin32:Banload-ETR [Trj]

How to remove Dropped:Trojan.Autorun.LN?

Dropped:Trojan.Autorun.LN removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment