Should I remove “Trojan:Win32/Autorun”?

The Trojan:Win32/Autorun is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Autorun virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan:Win32/Autorun?


File Info:
name: 3106745D3F38CD1B40A3.mlw
path: /opt/CAPEv2/storage/binaries/6e63fcabb62f6c554b4845e95d42a1912bfc957ef548a06597e3a6df6c1ddf27
crc32: D4F6EF8C
md5: 3106745d3f38cd1b40a331fd8a555bb2
sha1: 8fdd4cd642125c062fd05d548c322eeb0514a8c8
sha256: 6e63fcabb62f6c554b4845e95d42a1912bfc957ef548a06597e3a6df6c1ddf27
sha512: a339dbec2afc3145a2cf2be4b6dd45f6f3d8557595ed47309d079dbcafdd7f83b919f6aaf0b92379bd1ccdc63a55ca5ec65c5381bd81610a483c4eefa556f8a4
ssdeep: 3072:Njxa3yvpDmpclpYDXe195VgL8GZXoql7QtNubY9bvqYZ:Nla3yRD7Y7ePLgL5Ph6vL
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T14844AF0238D380BBD34F023C06A11BB65BFED5129FB39A9BD744CE5C5E727618936266
sha3_384: a2e95bc118d6416797b1ed70c8a8f4888213c6f1c4cb6a204d9faba2b580b27557799c64b75be12b00609d8cd4574884
ep_bytes: 558bec538b5d08568b750c578b7d1085
timestamp: 2010-07-21 06:53:23

Version Info:
Comments: ipsee150841112869357
CompanyName: ipsee150841112869357
FileDescription: ipsee150841112869357
FileVersion: 1,0,0,0
ÃùÐ»: ´óÓÐÎâÌÎÒ×ÓïÑÔÈí¼þ¿ª·¢ÓÐÏÞ¹«Ë¾
±à³ÌÓïÑÔ: 12ÕýÊ½ÆóÒµ°æ
Translation: 0x0804 0x04b0

Trojan:Win32/Autorun also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.3106745d3f38cd1b
CAT-QuickHeal	Trojan.Blackmoon.S7177
Skyhigh	BehavesLike.Win32.Infected.dm
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Gen:Variant.Jaik.98586
Sangfor	Trojan.Win32.Save.BlackMoon
K7AntiVirus	Trojan ( 00560cdb1 )
K7GW	Trojan ( 00560cdb1 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.Agent2.AIMR
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent.ZLZ
APEX	Malicious
ClamAV	Win.Trojan.Generic-10009221-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Jaik.98586
NANO-Antivirus	Trojan.Win32.Agent.crjsi
SUPERAntiSpyware	Trojan.Agent/Gen-Downloader
MicroWorld-eScan	Gen:Variant.Jaik.98586
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.10b2cf5a
Sophos	Troj/Dloadr-EGU
F-Secure	Trojan.TR/Skorik.D
DrWeb	Trojan.DownLoader26.28266
Zillya	Downloader.Agent.Win32.90796
TrendMicro	TROJ_GEN.R03BC0DAV24
Emsisoft	Gen:Variant.Jaik.98586 (B)
Ikarus	Trojan.Win32.Sasfis
GData	Win32.Trojan-Stealer.BlackMoon.D
Jiangmin	TrojanDownloader.Agent.cwuy
Webroot	W32.Rogue.Gen
Google	Detected
Avira	TR/Skorik.D
Antiy-AVL	Trojan/Win32.Genome
Kingsoft	malware.kb.a.879
Xcitium	TrojWare.Win32.Genome.wutv@7kn236
Arcabit	Trojan.Jaik.D1811A
ViRobot	Trojan.Win32.A.Downloader.262144.DJ
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Autorun
Varist	W32/A-38511e5d!Eldorado
AhnLab-V3	Trojan/Win32.Generic.C290136
BitDefenderTheta	Gen:NN.ZedlaF.36680.qu8@aCiXgfmb
ALYac	Gen:Variant.Jaik.98586
MAX	malware (ai score=82)
VBA32	Trojan.Downloader
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R03BC0DAV24
Rising	Trojan.Spy.Win32.Undef.aig (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	W32/Blackmoon.D!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/Autorun?

Trojan:Win32/Autorun removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X