About “TrojanDropper:AutoIt/Pistolar!pz” infection

The TrojanDropper:AutoIt/Pistolar!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What TrojanDropper:AutoIt/Pistolar!pz virus can do?

Sample contains Overlay data
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family

How to determine TrojanDropper:AutoIt/Pistolar!pz?


File Info:
name: 35A176BEC5CC79039481.mlw
path: /opt/CAPEv2/storage/binaries/54019300e80166add503e47f39eda2bbd2c062e387db04ee96f0929ae80b82c2
crc32: A5F3214B
md5: 35a176bec5cc79039481aefd1b37bd76
sha1: 37ddad79aed107912235d9a309b0fbeccba085ea
sha256: 54019300e80166add503e47f39eda2bbd2c062e387db04ee96f0929ae80b82c2
sha512: 6361db63eca30ed4ac8de81343ec10148e947d33c1aee98493d33eec863539a18f0f404779d656390705242dad32e2ec337e361624cc13111ae2e437f45a5a14
ssdeep: 12288:9hkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcbNyS:LRmJkcoQricOIQxiZY12NyS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T158D4AF21B5C68076C2B323B19E7EF76A9A3D79360336D29727C82D315EA05416B39733
sha3_384: 164f6c674996f137c95ed6b75e82764c845e2a33bf99da4ca05386f58113bec85bf2979a8d91e16bb7675b3939fd9166
ep_bytes: e816900000e989feffffcccccccccc55
timestamp: 2012-01-29 21:32:28

Version Info:
FileDescription: 
FileVersion: 3, 3, 8, 1
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
Translation: 0x0809 0x04b0

TrojanDropper:AutoIt/Pistolar!pz also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Generic.8121236
ClamAV	Win.Malware.Autoit-6981134-0
CAT-QuickHeal	Trojan.AutoIt.Pistolar.A
Skyhigh	Autoit.Dropper.gen.a
McAfee	Autoit.Dropper.gen.a
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Trojan.Generic.8121236
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 700000111 )
K7GW	Trojan ( 700000111 )
CrowdStrike	win/malicious_confidence_100% (D)
Baidu	AutoIt.Worm.Agent.a
Symantec	W32.SillyFDC
ESET-NOD32	multiple detections
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Autoit.blz
BitDefender	Trojan.Generic.8121236
NANO-Antivirus	Trojan.Script.AutoIt.dbycns
Avast	AutoIt:Agent-DP [Trj]
Emsisoft	Trojan.Generic.8121236 (B)
F-Secure	Trojan.TR/Rogue.JH.7554630
DrWeb	BackDoor.IRC.Bot.3238
Zillya	Worm.AutoitGen.Win32.946
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.35a176bec5cc7903
Sophos	W32/AutoIt-QA
GData	Trojan.Generic.8121236
Jiangmin	Trojan.Generic.ixgl
Google	Detected
Avira	TR/Rogue.JH.7554630
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Win32.Autoit
Kingsoft	malware.kb.a.992
Arcabit	Trojan.Generic.D7BEB94
ZoneAlarm	HEUR:Trojan.Win32.Hesv.gen
Microsoft	TrojanDropper:AutoIt/Pistolar!pz
Varist	AI/Trojan.A
AhnLab-V3	Trojan/Win32.AutoIt.R258728
VBA32	Trojan.Autoit
ALYac	Trojan.Generic.8121236
Cylance	unsafe
Panda	Trj/Autoit.gen
Rising	Dropper.Pistolar/Autoit!1.A603 (CLASSIC)
Ikarus	Worm.Win32.AutoIt
MaxSecure	Trojan.Autoit.AZA
Fortinet	W32/Autoit.HZ!worm
BitDefenderTheta	AI:Packer.05DA809615
AVG	AutoIt:Agent-DP [Trj]
Cybereason	malicious.9aed10
DeepInstinct	MALICIOUS

How to remove TrojanDropper:AutoIt/Pistolar!pz?

TrojanDropper:AutoIt/Pistolar!pz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X