How to remove “TrojanDropper:AutoIt/Pistolar!pz”?

The TrojanDropper:AutoIt/Pistolar!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What TrojanDropper:AutoIt/Pistolar!pz virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine TrojanDropper:AutoIt/Pistolar!pz?


File Info:
name: 6DACF7DD5C0A4189FBAE.mlw
path: /opt/CAPEv2/storage/binaries/304d2bb9d30c95dd648666bff0e81b9488764b12495739296ae446f93ed27b9a
crc32: D4224856
md5: 6dacf7dd5c0a4189fbae8b4471c3c2e2
sha1: 6cf64846a3f1df35782c036024769a1eb1ebb18e
sha256: 304d2bb9d30c95dd648666bff0e81b9488764b12495739296ae446f93ed27b9a
sha512: c8e6ce9986801ffb495274a7ba4b0149ecd9bcecf3ca92b6b52cb8e68a987d0523ea2ca3321686fef15feba82fa883fc9851f66549c036fbe0a32277a352e30a
ssdeep: 12288:9hkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcbNy76Wq4aan6Wq4aaE6KD:LRmJkcoQricOIQxiZY12NyhthFthEb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A905B022F5D59036C2B323B19E7EF7669A3979360336D1DB23C82D211EA05816B39773
sha3_384: 781099cab68cf779fc2c46f12cbd98f44b521e26c87b976ea787ac8c7de955d95f9ee741f9f414f329b5e073431de57b
ep_bytes: e816900000e989feffffcccccccccc55
timestamp: 2012-01-29 21:32:28

Version Info:
FileDescription: 
FileVersion: 3, 3, 8, 1
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
Translation: 0x0809 0x04b0

TrojanDropper:AutoIt/Pistolar!pz also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Generic.8121236
ClamAV	Win.Malware.Autoit-6981134-0
FireEye	Generic.mg.6dacf7dd5c0a4189
CAT-QuickHeal	Trojan.AutoIt.Pistolar.A
Skyhigh	Autoit.Dropper.gen.a
ALYac	Trojan.Generic.8121236
Cylance	unsafe
Zillya	Worm.AutoitGen.Win32.946
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 700000111 )
K7GW	Trojan ( 700000111 )
Cybereason	malicious.6a3f1d
Baidu	AutoIt.Worm.Agent.a
Symantec	W32.SillyFDC
ESET-NOD32	multiple detections
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Autoit.blz
BitDefender	Trojan.Generic.8121236
NANO-Antivirus	Trojan.Script.AutoIt.dbycns
Avast	AutoIt:Agent-DP [Trj]
Tencent	Win32.Trojan.Autoit.Ychl
Sophos	W32/AutoIt-QA
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	BackDoor.IRC.Bot.3238
VIPRE	Trojan.Generic.8121236
Emsisoft	Trojan.Generic.8121236 (B)
SentinelOne	Static AI – Suspicious PE
GData	Trojan.Generic.8121236
Jiangmin	Trojan.Generic.ixgl
Google	Detected
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Win32.Autoit
Arcabit	Trojan.Generic.D7BEB94
ZoneAlarm	Trojan.Win32.Autoit.blz
Microsoft	TrojanDropper:AutoIt/Pistolar!pz
Varist	W32/AutoIt.WG.gen!Eldorado
AhnLab-V3	Trojan/Win32.AutoIt.R258728
McAfee	Artemis!6DACF7DD5C0A
MAX	malware (ai score=85)
VBA32	Trojan.Autoit
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Autoit.gen
Rising	Dropper.Pistolar/Autoit!1.A603 (CLASSIC)
Ikarus	Worm.Win32.AutoIt
MaxSecure	Trojan.Autoit.AZA
Fortinet	W32/Autoit.HZ!worm
BitDefenderTheta	AI:Packer.05DA809615
AVG	AutoIt:Agent-DP [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove TrojanDropper:AutoIt/Pistolar!pz?

TrojanDropper:AutoIt/Pistolar!pz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X