Trojan.Win32.AutoIt (A) (file analysis)

The Trojan.Win32.AutoIt (A) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.AutoIt (A) virus can do?

• Reads data out of its own binary image
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX

How to determine Trojan.Win32.AutoIt (A)?

File Info:
crc32: B2EB5E18
md5: 210ae48e92584a8c753a966a11399d39
name: 210AE48E92584A8C753A966A11399D39.mlw
sha1: e8b050b14f05f02b470bbb73ffb22954d2a896f7
sha256: 8a6c7cfe092640bba11404faa96e6c6fd66a6fb2efca22cc22e92a4fd36f7e80
sha512: 0a2d0681131dc2fe0a264badbb61ad48ae1ead1abb1c4d5819a55f5c3b5b599e4c752d08d0865856a59c4088203ea5e69caa7969b56dd921c11b132b8ac4598a
ssdeep: 6144:87wElE5IPsR0FdmWh/4YM7GOal7XoQZZLd0l1OBMhTevQ+svpAsFGlNJ3A1j:MwEER5Wqn7BQja1//pAMSRe
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: x4f5cx8005:KLU3K
FileVersion: 1.0.0.1
Comments: x6ce8x518cx8868x7684x5bfcx5165x4e0ex6e05x7406xff0cCD Keyx7684x624bx52a8x548cx81eax52a8x66f4x6362x3002
FileDescription: x8f85x52a9x5de5x5177
Translation: 0x0804 0x04b0

Trojan.Win32.AutoIt (A) also known as:

How to remove Trojan.Win32.AutoIt (A)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.