Ransom

Ransom.Microcop.AutoIt removal

Malware Removal

The Ransom.Microcop.AutoIt is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom.Microcop.AutoIt virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Exhibits possible ransomware file modification behavior
  • Network activity detected but not expressed in API logs
  • Clears web history

How to determine Ransom.Microcop.AutoIt?


File Info:

crc32: 8151CB6F
md5: 7a0495e23784eb4242b4866a22ce0a05
name: 7A0495E23784EB4242B4866A22CE0A05.mlw
sha1: 6c2a52092c7029df0c40219404218d952bd268d2
sha256: 6bdb5802939d17a4c047b124c51cfd56b7fc6596cf98e8a72626ab8ce8981dc8
sha512: 8710ff3d5dd69a78cec4d738650bb60cb7890f51240fc8639fd7b26efb2e0910d360c799b482f8257bc0c79fcce207eeebc6fe8ca52f13c4c47be7924753269a
ssdeep: 24576:FmoO8itkbgr+aJDZsZajlOGcBHlkxxObf9G582vB:wggrlJZsZajlOGcBKXObd2vB
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Ransom.Microcop.AutoIt also known as:

BkavW32.AIDetect.malware1
DrWebTrojan.Encoder.24597
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.45242634
CylanceUnsafe
SangforTrojan.Win32.Save.a
AlibabaRansom:Win32/CRYPTEIGHT.ac81ccbc
CyrenW32/S-e8958863!Eldorado
SymantecRansom.CryptXXX
ESET-NOD32a variant of Win32/Filecoder.Crypt888.B
APEXMalicious
AvastAutoIt:Ransom-L [Trj]
BitDefenderTrojan.GenericKD.45242634
NANO-AntivirusTrojan.Win32.Encoder.ffvfbb
MicroWorld-eScanTrojan.GenericKD.45242634
TencentWin32.Trojan.Gen.Agky
SophosMal/Generic-S
ComodoMalware@#2tm3vxbisa948
BitDefenderThetaGen:NN.ZexaF.34684.azZ@aCo6lpnO
TrendMicroRansom.AutoIt.CRYPTEIGHT.SMTH
McAfee-GW-EditionBehavesLike.Win32.AdwareLinkury.th
FireEyeGeneric.mg.7a0495e23784eb42
EmsisoftTrojan.GenericKD.45242634 (B)
SentinelOneStatic AI – Suspicious PE
AviraHEUR/AGEN.1110296
MicrosoftTrojan:Win32/Dynamer!rfn
GDataTrojan.GenericKD.45242634
McAfeeArtemis!7A0495E23784
MAXmalware (ai score=88)
VBA32Trojan.Encoder
MalwarebytesRansom.Microcop.AutoIt
PandaTrj/CI.A
RisingRansom.Crypt888/Autoit!1.C27B (CLASSIC)
IkarusTrojan-Ransom.Crypt888
FortinetW32/Filecoder_Crypt888.B!tr
AVGAutoIt:Ransom-L [Trj]
Paloaltogeneric.ml

How to remove Ransom.Microcop.AutoIt?

Ransom.Microcop.AutoIt removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment