Trojan

Win32/TrojanDownloader.Autoit.ONV removal tips

Malware Removal

The Win32/TrojanDownloader.Autoit.ONV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/TrojanDownloader.Autoit.ONV virus can do?

  • Performs some HTTP requests
  • Creates a hidden or system file
  • Attempts to modify proxy settings

Related domains:

z.whorecord.xyz
a.tomx.xyz
activator.website

How to determine Win32/TrojanDownloader.Autoit.ONV?


File Info:

crc32: A312B035
md5: f39cd0a103332d619de49ed2e5ffd1d5
name: F39CD0A103332D619DE49ED2E5FFD1D5.mlw
sha1: 990fcbb05bcaad7c0bcf6162092988569710705e
sha256: 1a22954eab831be97eecb8882c20c212ae329a6362391bea8629d12cfb40e949
sha512: c7fc0c06d00d34816f9ba1250df9f0feb0148853c5a05c60c02ddfc57423fb97bf14d900e684aa58e1993effa661b8a135131bd9a58268296ebd8b15cab68703
ssdeep: 12288:JCdOy3vVrKxR5CXbNjAOxK/j2n+4YG/6c1mFFja3mXgcjfRlgsUBgax7xAQ:JCdxte/80jYLT3U1jfsWatxAQ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Win32/TrojanDownloader.Autoit.ONV also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan-Downloader ( 00536b611 )
LionicTrojan.Win32.Generic.4!e
ALYacTrojan.GenericKD.31034910
CrowdStrikewin/malicious_confidence_60% (W)
BitDefenderTrojan.GenericKD.31034910
K7GWTrojan-Downloader ( 00536b611 )
Cybereasonmalicious.103332
CyrenW32/AutoIt.GZ.gen!Eldorado
ESET-NOD32a variant of Win32/TrojanDownloader.Autoit.ONV
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Downloader.Win32.Upatre.gxlz
AlibabaTrojanDownloader:Win32/Upatre.827f326c
NANO-AntivirusTrojan.Win32.Upatre.ffatzz
MicroWorld-eScanTrojan.GenericKD.31034910
TencentWin32.Trojan-downloader.Upatre.Ectw
Ad-AwareTrojan.GenericKD.31034910
SophosMal/Generic-S
ComodoMalware@#1cvher2wxx85k
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.TrojanAitInject.ch
FireEyeTrojan.GenericKD.31034910
EmsisoftTrojan.GenericKD.31034910 (B)
AviraHEUR/AGEN.1100171
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataTrojan.GenericKD.31034910
McAfeeArtemis!F39CD0A10333
MAXmalware (ai score=84)
PandaTrj/CI.A
IkarusTrojan-Downloader.Win32.AutoIt
FortinetAutoIt/Agent.ONV!tr.dldr

How to remove Win32/TrojanDownloader.Autoit.ONV?

Win32/TrojanDownloader.Autoit.ONV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment