Trojan.Win32.Autoit.fmz information

The Trojan.Win32.Autoit.fmz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Autoit.fmz virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Trojan.Win32.Autoit.fmz?


File Info:
name: C853B6E5EC3E0A01993A.mlw
path: /opt/CAPEv2/storage/binaries/edc37b1d4378036506544c97b974a6020e901b2a67cca303ddaa61420b60f58a
crc32: 77F9A9C1
md5: c853b6e5ec3e0a01993a960b9b83e01b
sha1: 211e02bcca48169fb7286bda412fd974b8ce3a35
sha256: edc37b1d4378036506544c97b974a6020e901b2a67cca303ddaa61420b60f58a
sha512: e121fefd028f43a2049fecb4504ef80b2f2450831a2ee08944f6810dae4c2d89306de7fce01d6abb0a1949bc056971667aaae5a255b2a1f3b63eca4a766ce00b
ssdeep: 24576:SAHnh+eWsN3skA4RV1Hom2KXMmHaooLLIz5:Vh+ZkldoPK8YaooLC
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E9158C0273D1C036FFABA2739B6AF60156BD79254123852F13981DB9BD701B2263E763
sha3_384: f052d582fad6abc25f33274af64dea65298660bc79318a0a223f1053859033a2328535c3d8273e3b9061588fa96fbfce
ep_bytes: e8c8d00000e97ffeffffcccccccccccc
timestamp: 2019-05-05 21:04:17

Version Info:
Translation: 0x0809 0x04b0

Trojan.Win32.Autoit.fmz also known as:

Bkav	W32.CsrjshAXY.Trojan
Lionic	Hacktool.Win32.Gamehack.3!e
tehtris	Generic.Malware
MicroWorld-eScan	Trojan.GenericKD.31945118
FireEye	Generic.mg.c853b6e5ec3e0a01
CAT-QuickHeal	Trojan.Autoit
McAfee	Artemis!C853B6E5EC3E
Cylance	Unsafe
Sangfor	Trojan.Win32.Autoit.G
K7AntiVirus	Trojan ( 0054d83f1 )
Alibaba	Trojan:Win32/Obfuscated.5e36e5bf
K7GW	Trojan ( 0054d83f1 )
Cybereason	malicious.5ec3e0
VirIT	Worm.Win32.X-Aurun.CASZ
Cyren	W32/AutoIt.VI.gen!Eldorado
Symantec	Trojan.Gen.MBT
Elastic	malicious (moderate confidence)
ESET-NOD32	multiple detections
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Autoit.fmz
BitDefender	Trojan.GenericKD.31945118
NANO-Antivirus	Trojan.Win32.Crypt.fpwprz
Tencent	Win32.Trojan.Autoit.Syhn
Ad-Aware	Trojan.GenericKD.31945118
Comodo	Malware@#2wzvu1wdrcl1h
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
Sophos	Mal/Generic-S
APEX	Malicious
GData	Trojan.GenericKD.31945118
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1245523
Arcabit	Trojan.Generic.D1E7719E
ZoneAlarm	Trojan.Win32.Autoit.fmz
Microsoft	Trojan:Win32/Occamy.CED
AhnLab-V3	Trojan/Win32.Azden.C3209341
ALYac	Trojan.GenericKD.31945118
VBA32	Trojan.Autoit
Ikarus	Trojan.Win32.Obfuscated
Fortinet	AutoIt/Agent.OID!tr
Panda	Trj/CI.A

How to remove Trojan.Win32.Autoit.fmz?

Trojan.Win32.Autoit.fmz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X