Trojan.AutoIT.Agent.TO removal guide

The Trojan.AutoIT.Agent.TO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.AutoIT.Agent.TO virus can do?

Network activity detected but not expressed in API logs

How to determine Trojan.AutoIT.Agent.TO?


File Info:
crc32: 0887A4C0
md5: a4f3af10cae4e1e3e756bd84d343c8e8
name: A4F3AF10CAE4E1E3E756BD84D343C8E8.mlw
sha1: dc9048e578ef60ca5ffead71462e936aac66c3c4
sha256: 5edba5b750999510d128b5fe1ca0b16cd6f18e8f83c6a8929165fd225dbd9469
sha512: 340af875e9e673de0f5d908f6b8c5c8ed3e4c76124b62107aaaca3b31a5bbcee4eb8399e800c1b6abc34a04dd5c3d1eff91dd4294eb6b1c125210b81617ab265
ssdeep: 12288:2CdOy3vVrKxR5CXbNjAOxK/j2n+4YG/6c1mFFja3mXgcjfRlgsUBgaSdfQ:2Cdxte/80jYLT3U1jfsWaSdfQ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
FileVersion: 0.0.0.0
CompanyName: hZCuOQuLu
Translation: 0x0809 0x04b0

Trojan.AutoIT.Agent.TO also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 0054bc841 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Starter.7878
Cynet	Malicious (score: 100)
ALYac	Trojan.AutoIT.Agent.TO
Cylance	Unsafe
Alibaba	Trojan:Win32/AutoitShellInj.72f6a1f7
K7GW	Trojan ( 0054bc841 )
Cybereason	malicious.0cae4e
Cyren	W32/AutoIt.SQ.gen!Eldorado
ESET-NOD32	a variant of Win32/Autoit.OGC
APEX	Malicious
Avast	AutoIt:Runner-BG [Trj]
Kaspersky	UDS:Trojan.Script.Generic
BitDefender	Trojan.AutoIT.Agent.TO
NANO-Antivirus	Trojan.Win32.Autoit.foanpe
MicroWorld-eScan	Trojan.AutoIT.Agent.TO
Tencent	Win32.Trojan.Generic.Lorj
Ad-Aware	Trojan.AutoIT.Agent.TO
Sophos	Mal/Generic-S + Troj/Autoit-CPL
Comodo	TrojWare.Win32.Autoit.OGH@8hon62
TrendMicro	Trojan.AutoIt.VICTORYGATE.SM
McAfee-GW-Edition	BehavesLike.Win32.Trojanaitinject.ch
FireEye	Trojan.AutoIT.Agent.TO
Emsisoft	Trojan.AutoIT.Agent.TO (B)
Avira	WORM/FakeExt.Gen8
Antiy-AVL	Trojan/Generic.ASCommon.16F
Microsoft	Trojan:Win32/Occamy.C
GData	Trojan.AutoIT.Agent.TO (2x)
AhnLab-V3	Trojan/Win32.Starter.R241379
McAfee	Artemis!A4F3AF10CAE4
MAX	malware (ai score=80)
Malwarebytes	Trojan.Dropper.AutoIt
Panda	Trj/CI.A
TrendMicro-HouseCall	Trojan.AutoIt.VICTORYGATE.SM
Ikarus	Trojan.Win32.Autoit
Fortinet	W32/Autoit.OFY!tr
AVG	AutoIt:Runner-BG [Trj]
Paloalto	generic.ml

How to remove Trojan.AutoIT.Agent.TO?

Trojan.AutoIT.Agent.TO removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X