Trojan.Win32.Autoit.fdg removal instruction

The Trojan.Win32.Autoit.fdg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Autoit.fdg virus can do?

Injection (inter-process)
Injection (Process Hollowing)
Executable code extraction
Injection with CreateRemoteThread in a remote process
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
At least one IP Address, Domain, or File Name was found in a crypto call
Reads data out of its own binary image
Executed a process and injected code into it, probably while unpacking
Attempts to remove evidence of file being downloaded from the Internet
Exhibits behavior characteristic of Nanocore RAT
Collects information to fingerprint the system

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Win32.Autoit.fdg?


File Info:
crc32: 8EED0DE7
md5: add3c9f3affc7afd731afbff505be446
name: ADD3C9F3AFFC7AFD731AFBFF505BE446.mlw
sha1: 9e96fc30c4133ff65a70cba9cb57d4f940bbdc4b
sha256: d164b300f2357f95493a9678dfb52408354f29de07bd491fca7ee23904686a78
sha512: ba47c1640f6f2431d07399699d32ada78f16f3ce7898bca2bc2236377b3779ed109634afc120735dd550e5d9d4b2c62188e6fa3b920844b6f6c51784724da039
ssdeep: 24576:+po/2+ttPJLfpRK+QB4s4bFXbA9AxzaxDQO5zVsJxjtruwqRkVTXrJbB45bEFp:He2PJLa+Qj4lGpzV2xuwHvJbB4ED
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
CompiledScript: AutoIt v3 Script : 3, 3, 0, 0
FileVersion: 3, 3, 0, 0
FileDescription: 
Translation: 0x0809 0x04b0

Trojan.Win32.Autoit.fdg also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Spyware ( 0055e3ec1 )
Lionic	Trojan.Win32.Autoit.4!c
DrWeb	Trojan.PWS.Stealer.17428
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.3370661
Cylance	Unsafe
Zillya	Worm.AutoitGen.Win32.844
CrowdStrike	win/malicious_confidence_70% (D)
Alibaba	Trojan:Win32/Injector.c7c7abbe
K7GW	Spyware ( 0055e3ec1 )
Cybereason	malicious.3affc7
Symantec	Trojan.Gen
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Autoit-9895204-0
Kaspersky	Trojan.Win32.Autoit.fdg
BitDefender	Trojan.GenericKD.3370661
NANO-Antivirus	Trojan.Script.Agent.debxaj
MicroWorld-eScan	Trojan.GenericKD.3370661
Tencent	Win32.Trojan.Autoit.Lrih
Ad-Aware	Trojan.GenericKD.3370661
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Yahlover.th
FireEye	Generic.mg.add3c9f3affc7afd
Emsisoft	Trojan.GenericKD.3370661 (B)
Jiangmin	Trojan.Autoit.hnq
Webroot	W32.Trojan.GenKD
Avira	HEUR/AGEN.1105049
Kingsoft	Win32.Troj.Autoit.f.(kcloud)
Microsoft	TrojanSpy:Win32/Skeeyah.A!rfn
GData	Trojan.GenericKD.3370661
McAfee	Artemis!ADD3C9F3AFFC
MAX	malware (ai score=100)
VBA32	Trojan.Autoit.Injcrypt
Panda	Trj/CI.A
Ikarus	Trojan.MSIL.Spy
MaxSecure	Worm.Win32.AutoIt.QN
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Trojan.Win32.Autoit.fdg?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Win32.Autoit.fdg removal instruction