Trojan

TrojanDropper:AutoIt/Pistolar!pz removal tips

Malware Removal

The TrojanDropper:AutoIt/Pistolar!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDropper:AutoIt/Pistolar!pz virus can do?

  • Sample contains Overlay data
  • Authenticode signature is invalid

How to determine TrojanDropper:AutoIt/Pistolar!pz?


File Info:

name: 9F85D0E16C659E13A366.mlw
path: /opt/CAPEv2/storage/binaries/7698acbe9d25fa561f1c8b45ae277ea6c981c755d00fab50936a24d99faebf88
crc32: C8B65CEC
md5: 9f85d0e16c659e13a3666d381626f751
sha1: 6903b18858d06cdaed0b712f924786dc2f0f5103
sha256: 7698acbe9d25fa561f1c8b45ae277ea6c981c755d00fab50936a24d99faebf88
sha512: d128f73bfd62f3368bba7c5223fc490adaab6ce8fc56953b186d35df2b014f23eda29b492a32f386be7d8eedaa7b413485bb3f64c051d41fe0eb41fa28dc56c1
ssdeep: 12288:9hkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcbNy76Wq4y:LRmJkcoQricOIQxiZY12Nyhty
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T148E4AF21B5C69036C2B323B19E7EF76A9A3D79360336D19727C82D325EA05416B39733
sha3_384: 24808ec34072b400fe951c3c440781f1a7c3ff2f1b4085ce35fa63526b57f4bef8229b56f37b777029fb76485db4c149
ep_bytes: e816900000e989feffffcccccccccc55
timestamp: 2012-01-29 21:32:28

Version Info:

FileDescription:
FileVersion: 3, 3, 8, 1
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
Translation: 0x0809 0x04b0

TrojanDropper:AutoIt/Pistolar!pz also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanTrojan.Generic.8121236
ClamAVWin.Malware.Autoit-6981134-0
FireEyeGeneric.mg.9f85d0e16c659e13
CAT-QuickHealTrojan.AutoIt.Pistolar.A
SkyhighAutoit.Dropper.gen.a
McAfeeAutoit.Dropper.gen.a
MalwarebytesGeneric.Malware.AI.DDS
VIPRETrojan.Generic.8121236
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 700000111 )
K7GWTrojan ( 700000111 )
Cybereasonmalicious.858d06
ArcabitTrojan.Generic.D7BEB94
BaiduAutoIt.Worm.Agent.a
SymantecW32.SillyFDC
Elasticmalicious (high confidence)
ESET-NOD32multiple detections
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Autoit.blz
BitDefenderTrojan.Generic.8121236
NANO-AntivirusTrojan.Script.AutoIt.dbycns
AvastAutoIt:Agent-DP [Trj]
EmsisoftTrojan.Generic.8121236 (B)
F-SecureTrojan.TR/Dropper.Gen
DrWebBackDoor.IRC.Bot.3238
ZillyaWorm.AutoitGen.Win32.946
Trapminemalicious.high.ml.score
SophosW32/AutoIt-QA
IkarusWorm.Win32.AutoIt
JiangminTrojan.Generic.ixgl
GoogleDetected
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Win32.Autoit
MicrosoftTrojanDropper:AutoIt/Pistolar!pz
ZoneAlarmTrojan.Win32.Autoit.blz
GDataTrojan.Generic.8121236
VaristAI/Trojan.A
AhnLab-V3Trojan/Win32.AutoIt.R258728
BitDefenderThetaAI:Packer.05DA809615
ALYacTrojan.Generic.8121236
MAXmalware (ai score=87)
VBA32Trojan.Autoit
Cylanceunsafe
PandaTrj/Autoit.gen
RisingDropper.Pistolar/Autoit!1.A603 (CLASSIC)
MaxSecureTrojan.Autoit.AZA
FortinetW32/Autoit.HZ!worm
AVGAutoIt:Agent-DP [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove TrojanDropper:AutoIt/Pistolar!pz?

TrojanDropper:AutoIt/Pistolar!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment