Categories: Trojan

About “Win32/TrojanDownloader.AutoHK.JS” infection

The Win32/TrojanDownloader.AutoHK.JS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.AutoHK.JS virus can do?

A process attempted to delay the analysis task.
Attempts to connect to a dead IP:Port (6 unique times)
A process created a hidden window
Performs some HTTP requests
Installs itself for autorun at Windows startup

Related domains:

pastebin.com

ocsp.digicert.com

dev-point.co

apps.identrust.com

isrg.trustid.ocsp.identrust.com

ocsp.int-x3.letsencrypt.org

How to determine Win32/TrojanDownloader.AutoHK.JS?


File Info:
crc32: B3EB7DD7md5: e5ae4f38071c3792af77dd1f5b4bf450name: E5AE4F38071C3792AF77DD1F5B4BF450.mlwsha1: 44e73fff25589792fd9cd481bb811e0cdd8b8ac1sha256: 63a099705d8c68ae0a90a098626027f0c86af7fae588e27c24006909b78ba381sha512: f445c105d7ce0575891fea8cfa677bed052d3875a4f11a8a5668c6623f38298cd4a798f86da365bd76e5b1e5a713dc41a27f9954967a28ab36a6ebef270e36a6ssdeep: 24576:bT7S3bTIUwHsrxYYpxUbXfzzKeLCKc1q0ZUEIn:b4bj0z6bV1qqUE2type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: InternalName: FileVersion: 1.1.26.01ProductName: ProductVersion: 1.1.26.01FileDescription: OriginalFilename: Translation: 0x0409 0x04b0

Win32/TrojanDownloader.AutoHK.JS also known as:

MicroWorld-eScan	Trojan.GenericKD.34403341
FireEye	Trojan.GenericKD.34403341
Qihoo-360	Win32/Trojan.5a2
McAfee	Artemis!E5AE4F38071C
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Generic.4!c
Sangfor	Malware
K7AntiVirus	Trojan-Downloader ( 00543f641 )
BitDefender	Trojan.GenericKD.34403341
K7GW	Trojan-Downloader ( 00543f641 )
CrowdStrike	win/malicious_confidence_90% (W)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrojanDownloader.AutoHK.JS
Avast	FileRepMalware
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	TrojanDownloader:Win32/AutoHK.470220c0
Rising	Trojan.Generic@ML.100 (RDMK:trtkuT659ATT2+vjzZroOw)
Ad-Aware	Trojan.GenericKD.34403341
Sophos	Mal/Generic-R + Troj/DwnLdr-ZHX
Comodo	Malware@#3d1uv8qgouufr
TrendMicro	TROJ_FRS.0NA103AD20
McAfee-GW-Edition	BehavesLike.Win32.Yahlover.ch
Emsisoft	Trojan.GenericKD.34403341 (B)
Jiangmin	Trojan.Hesv.dss
MAX	malware (ai score=100)
Microsoft	Trojan:Win32/Occamy.C63
Gridinsoft	Trojan.Win32.Downloader.oa
Arcabit	Trojan.Generic.D20CF40D
AhnLab-V3	Malware/Win32.Generic.C2650769
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Trojan.GenericKD.34403341
VBA32	Trojan.Wacatac
ALYac	Trojan.GenericKD.34403341
TACHYON	Trojan/W32.APosT.843264
Malwarebytes	Trojan.Downloader.AHK
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_FRS.0NA103AD20
Tencent	Win32.Trojan.Fakedoc.Auto
Yandex	Trojan.Agent!uJCsdLLDs/w
Ikarus	Trojan-Downloader.Win32.Autohk
Fortinet	W32/Generic!tr
AVG	FileRepMalware
Cybereason	malicious.8071c3