Ransom

How to remove “Ransom.Microcop.AutoIt.Generic”?

Malware Removal

The Ransom.Microcop.AutoIt.Generic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom.Microcop.AutoIt.Generic virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Ransom.Microcop.AutoIt.Generic?


File Info:

crc32: 9CA42AA3
md5: 4605cba3fca4741c11f8fbe2b8668ec5
name: 4605CBA3FCA4741C11F8FBE2B8668EC5.mlw
sha1: 0b0880e1a16da35344d79016035123fc6f8bc920
sha256: 1505fa6a61e07e4d35d7e9b427df4bced554cb673afb2ee24678af5364ec212d
sha512: ab7b3d730ae0d1ccd639cfbb3830b6ecb448ff27327ddfd9008f9721eaaaf12e05c2ca3a06e8fe6351776e16d4be8a137154ed1222b3c927af72ce0ea6f9bcfe
ssdeep: 6144:4uIlWqBEihabs7Ch9KwyF5LeLodp2D1Mmakda0qLifOC0g3Qv2CT2wG:j6WqiaaE6KwyF5L0Y2D1PqLQAub
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
FileVersion: 3, 3, 8, 1
FileDescription:
Translation: 0x0809 0x04b0

Ransom.Microcop.AutoIt.Generic also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 700000111 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojanPWS.AutoIt.Zbot.P
ALYacAIT:Trojan.Nymeria.4490
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
BitDefenderAIT:Trojan.Nymeria.4490
K7GWTrojan ( 700000111 )
Cybereasonmalicious.3fca47
ESET-NOD32multiple detections
APEXMalicious
ClamAVWin.Ransomware.Locked-7053959-0
KasperskyHEUR:Trojan.Win32.Generic
MicroWorld-eScanAIT:Trojan.Nymeria.4490
Ad-AwareAIT:Trojan.Nymeria.4490
SophosML/PE-A
ComodoPacked.Win32.MUPX.Gen@24tbus
F-SecureDropper.DR/AutoIt.Gen
BitDefenderThetaAI:Packer.920B065C17
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
FireEyeAIT:Trojan.Nymeria.4490
EmsisoftAIT:Trojan.Nymeria.4490 (B)
AviraDR/AutoIt.Gen
Antiy-AVLGrayWare/Autoit.Execute.a
ArcabitAIT:Trojan.Nymeria.D118A
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataAIT:Trojan.Nymeria.4490 (2x)
McAfeeSuspect-AutIT.a
MAXmalware (ai score=85)
MalwarebytesRansom.Microcop.AutoIt.Generic
IkarusWorm.Win32.AutoIt
FortinetAutoIt/Filecoder.6114!tr.ransom

How to remove Ransom.Microcop.AutoIt.Generic?

Ransom.Microcop.AutoIt.Generic removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment