Malware

Troj/Autoit-DCP malicious file

Malware Removal

The Troj/Autoit-DCP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Troj/Autoit-DCP virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Troj/Autoit-DCP?


File Info:

crc32: 799E203F
md5: 4d627a5232cd3b587a0580f0009f144a
name: upload_file
sha1: af4fc10a9a8d9097aeea4f98ef411f6a0b0b8676
sha256: 02e86e0d0ce0efb60e77b8c8ada6c7a86d3d3114da644633dfb6d0a227f527a7
sha512: be0c01cc047f411d2c204a1769b98895d240d86789afadd31c7a9cad91e827cc48d2a043059534b63ab563fecd40fbea2749fe00e6a18a3d9c9557210f9c914a
ssdeep: 24576:LAHnh+eWsN3skA4RV1Hom2KXMmHaWI5E6j1oGrQ3iH5:mh+ZkldoPK8YaWI5EEDs3q
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Troj/Autoit-DCP also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
DrWebTrojan.AutoIt.939
MicroWorld-eScanTrojan.GenericKD.44315915
McAfeeArtemis!4D627A5232CD
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabHacktool.Win32.Gamehack.3!e
SangforMalware
K7AntiVirusTrojan ( 005716ff1 )
BitDefenderTrojan.GenericKD.44315915
K7GWTrojan ( 005716ff1 )
ArcabitTrojan.Generic.D2A4350B
InvinceaMal/Generic-R + Troj/Autoit-DCP
CyrenW32/Autoit.G.gen!Eldorado
SymantecTrojan.Gen.MBT
ZonerTrojan.Win32.96997
TrendMicro-HouseCallTrojanSpy.Win32.PREDATOR.VI
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan.Script.Generic
AlibabaTrojan:Win32/Predator.79198c31
ViRobotTrojan.Win32.Z.Autoit.1168384.B
RisingTrojan.Obfus/Autoit!1.CE31 (CLASSIC)
Ad-AwareTrojan.GenericKD.44315915
EmsisoftTrojan.GenericKD.44315915 (B)
ComodoMalware@#1fdx98g0n7967
F-SecureTrojan.TR/AutoIt.skidm
TrendMicroTrojanSpy.Win32.PREDATOR.VI
McAfee-GW-EditionBehavesLike.Win32.TrojanAitInject.tc
FireEyeGeneric.mg.4d627a5232cd3b58
SophosTroj/Autoit-DCP
IkarusTrojan.Autoit
eGambitUnsafe.AI_Score_99%
AviraTR/AutoIt.skidm
Antiy-AVLGrayWare/Autoit.Execute.a
GridinsoftTrojan.Win32.Downloader.oa
MicrosoftTrojan:Win32/Predator.SS!MTB
ZoneAlarmHEUR:Trojan.Script.Generic
GDataTrojan.GenericKD.44315915
CynetMalicious (score: 90)
AhnLab-V3Trojan/Win32.Injector.C4217719
VBA32Trojan.Autoit
ALYacTrojan.Agent.FormBook
MAXmalware (ai score=83)
MalwarebytesTrojan.MalPack.AutoIt.Generic
PandaTrj/CI.A
APEXMalicious
ESET-NOD32a variant of Win32/Injector.Autoit.FKG
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Script.FKG!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360Generic/Trojan.Script.ed4

How to remove Troj/Autoit-DCP?

Troj/Autoit-DCP removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment