Malware

What is “Troj/AutoG-ER”?

Malware Removal

The Troj/AutoG-ER is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Troj/AutoG-ER virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Possible date expiration check, exits too soon after checking local time
  • Performs some HTTP requests
  • Anomalous binary characteristics

Related domains:

rb3.ftnt.io

How to determine Troj/AutoG-ER?


File Info:

crc32: BAC4325D
md5: 6ee6dc0e39df13df637d55ce6228ab95
name: fsa_downloader_c73dc8.exe
sha1: 9e16f3d868d8b9a5c46f9a43e092cd4f3d401acd
sha256: 5a969ab112a34946d5dfdc49492a585d266d683216e55bd60b3b2d3772c73dc8
sha512: 720713311ab9de400a45b17642d5ac8048cddf5bdb0eab791f20e7d9e8ae44e9ab66feb540d7f9fcc51749a10d909bd4037f35450159d5e599fc1fd46562e617
ssdeep: 48:odTxwOZv1wOZGZdPkwOW1wAPFsXEJfmbJXr5BPr:oJxwOZv1wOZGZdPkwOW1wAPF+Ofmd75
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Troj/AutoG-ER also known as:

MicroWorld-eScanTrojan.TestSample.B
Qihoo-360Generic/Trojan.fc2
McAfeeGenericRXHA-OK!6EE6DC0E39DF
CylanceUnsafe
AegisLabTrojan.Win32.TestSample.4!c
SangforMalware
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.TestSample.B
Cybereasonmalicious.e39df1
Invinceaheuristic
BitDefenderThetaGen:NN.ZexaF.34084.amW@a4Uqt!o
F-ProtW32/Downloader-Sml!Eldorado
TrendMicro-HouseCallTROJ_GEN.R002C0PAG20
AvastWin32:Evo-gen [Susp]
GDataTrojan.TestSample.B
ViRobotTrojan.Win32.Z.Testsample.4096.AX
RisingTrojan.Occamy!8.F1CD (RDMK:cmRtazpsVFcWAEsMsFdCJ/S5jP/z)
Endgamemalicious (high confidence)
EmsisoftTrojan.TestSample.B (B)
ComodoMalware@#1vm1pzh468wnq
F-SecureTrojan.TR/Crypt.XPACK.Gen
VIPRETrojan-Downloader.Win32.Small!cobra (v)
TrendMicroTROJ_GEN.R002C0PAG20
McAfee-GW-EditionGenericRXHA-OK!6EE6DC0E39DF
FireEyeGeneric.mg.6ee6dc0e39df13df
SophosTroj/AutoG-ER
APEXMalicious
CyrenW32/Downloader-Sml!Eldorado
WebrootW32.Trojan.Gen
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=83)
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.TestSample.B
AhnLab-V3Malware/Gen.Generic.C1472977
SentinelOneDFI – Malicious PE
Acronissuspicious
VBA32suspected of Trojan.Downloader.gen.h
ALYacTrojan.TestSample.B
Ad-AwareTrojan.TestSample.B
IkarusTrojan.TestSample
eGambitUnsafe.AI_Score_99%
AVGWin32:Evo-gen [Susp]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (W)
MaxSecureTrojan.Malware.74274700.susgen

How to remove Troj/AutoG-ER?

Troj/AutoG-ER removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment