Should I remove “TrojanDropper:AutoIt/Pistolar!pz”?

The TrojanDropper:AutoIt/Pistolar!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What TrojanDropper:AutoIt/Pistolar!pz virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine TrojanDropper:AutoIt/Pistolar!pz?


File Info:
name: 28A947B35F4E3FA34EC5.mlw
path: /opt/CAPEv2/storage/binaries/f1d71dae0f3f0453804940b82057c21fefba5cc3bf6bc034dc8579fedd6dd325
crc32: BD6123EF
md5: 28a947b35f4e3fa34ec5a4ed97a0ab27
sha1: 2b57645705de14d1b8de364f26e16677eab554aa
sha256: f1d71dae0f3f0453804940b82057c21fefba5cc3bf6bc034dc8579fedd6dd325
sha512: fb82d58302e6710cfeb8c57f89b9c350726a0325779dac615c5c300c383bb329e96ec1f93cbf730a5a54da4afcf559c5915f1379b2fbccce370a2eb6a7f57e57
ssdeep: 12288:9hkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcbNy76Wq4aan6Wq4aaE6KF:LRmJkcoQricOIQxiZY12NyhthFthE9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16F05B022F5D59036C2B323B19E7EF7669A3979360336D1DB23C82D211EA05816B39773
sha3_384: e62171476ff53d8c99e1741198ea682c990792784e0fb02b308140f1e4baaf6370456caaaa27df0e2c657f04be259aa1
ep_bytes: e816900000e989feffffcccccccccc55
timestamp: 2012-01-29 21:32:28

Version Info:
FileDescription: 
FileVersion: 3, 3, 8, 1
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
Translation: 0x0809 0x04b0

TrojanDropper:AutoIt/Pistolar!pz also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Generic.8121236
ClamAV	Win.Malware.Autoit-6981134-0
CAT-QuickHeal	Trojan.AutoIt.Pistolar.A
Skyhigh	Autoit.Dropper.gen.a
McAfee	Autoit.Dropper.gen.a
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Worm.AutoitGen.Win32.946
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 700000111 )
K7GW	Trojan ( 700000111 )
Cybereason	malicious.705de1
Baidu	AutoIt.Worm.Agent.a
Symantec	W32.SillyFDC
ESET-NOD32	multiple detections
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Autoit.blz
BitDefender	Trojan.Generic.8121236
NANO-Antivirus	Trojan.Script.AutoIt.dbycns
Avast	AutoIt:Agent-DP [Trj]
Emsisoft	Trojan.Generic.8121236 (B)
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	BackDoor.IRC.Bot.3238
VIPRE	Trojan.Generic.8121236
TrendMicro	TROJ_GEN.R03BC0CBI24
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.28a947b35f4e3fa3
Sophos	W32/AutoIt-QA
SentinelOne	Static AI – Malicious PE
GData	Trojan.Generic.8121236
Jiangmin	Trojan.Generic.ixgl
Google	Detected
Avira	TR/Dropper.Gen
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Win32.Autoit
Kingsoft	malware.kb.a.999
Arcabit	Trojan.Generic.D7BEB94
ZoneAlarm	HEUR:Trojan.Win32.Hesv.gen
Microsoft	TrojanDropper:AutoIt/Pistolar!pz
Varist	W32/AutoIt.WG.gen!Eldorado
AhnLab-V3	Trojan/Win32.AutoIt.R258728
BitDefenderTheta	AI:Packer.05DA809615
ALYac	Trojan.Generic.8121236
VBA32	Trojan.Autoit
Cylance	unsafe
Panda	Trj/Autoit.gen
TrendMicro-HouseCall	TROJ_GEN.R03BC0CBI24
Rising	Dropper.Pistolar/Autoit!1.A603 (CLASSIC)
Ikarus	Worm.Win32.AutoIt
MaxSecure	Trojan.Autoit.AZA
Fortinet	W32/Autoit.HZ!worm
AVG	AutoIt:Agent-DP [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove TrojanDropper:AutoIt/Pistolar!pz?

TrojanDropper:AutoIt/Pistolar!pz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X