Trojan

Win32/TrojanDownloader.Autoit.OTO removal tips

Malware Removal

The Win32/TrojanDownloader.Autoit.OTO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/TrojanDownloader.Autoit.OTO virus can do?

  • A process attempted to delay the analysis task.
  • Attempts to connect to a dead IP:Port (5 unique times)
  • Performs some HTTP requests
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Attempts to modify proxy settings

Related domains:

jakesword.000webhostapp.com
ocsp.digicert.com
yip.su
apps.identrust.com
crl.identrust.com

How to determine Win32/TrojanDownloader.Autoit.OTO?


File Info:

crc32: 01019B3E
md5: 0acad57502ec7a7334c78a5143c23c75
name: 0ACAD57502EC7A7334C78A5143C23C75.mlw
sha1: feeea1ccd757be8f5c0cd62a7dcc04763964a6bc
sha256: 284fca96f27a66ed051896d2d4e4d4223bf13cb78f9ac93e4485690f552466f9
sha512: 0b491894c912c2ac8815fae233841c662ef76e5aaf9c5b6367c6af1c43ec9645e02e15f4de3580a99506d4f9c9e21767c23a760489d5417c0404e550b4a2bf5a
ssdeep: 24576:XAHnh+eWsN3skA4RV1Hom2KXMmHaaeS5:Kh+ZkldoPK8Yaaj
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Win32/TrojanDownloader.Autoit.OTO also known as:

BkavW32.AIDetectVM.malware1
MicroWorld-eScanTrojan.GenericKD.42053289
ALYacTrojan.GenericKD.42053289
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan-Downloader ( 0054e8c61 )
BitDefenderTrojan.GenericKD.42053289
K7GWTrojan-Downloader ( 0054e8c61 )
Cybereasonmalicious.502ec7
CyrenW32/AutoIt.OQ.gen!Eldorado
SymantecTrojan Horse
APEXMalicious
AvastWin32:Trojan-gen
KasperskyTrojan.Win32.Miner.adlpe
AlibabaTrojanDownloader:Win32/Miner.799f32da
NANO-AntivirusTrojan.Win32.Autoit.gklied
AegisLabHacktool.Win32.Gamehack.3!e
Ad-AwareTrojan.GenericKD.42053289
SophosMal/Generic-S
ComodoMalware@#334gthu65bkms
F-SecureHeuristic.HEUR/AGEN.1100246
DrWebTrojan.DownLoader30.45460
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.DownloaderAutoIt.ch
FireEyeGeneric.mg.0acad57502ec7a73
EmsisoftTrojan.GenericKD.42053289 (B)
WebrootW32.Malware.Gen
AviraHEUR/AGEN.1100246
eGambitUnsafe.AI_Score_77%
MAXmalware (ai score=85)
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Generic.D281AEA9
ZoneAlarmTrojan.Win32.Miner.adlpe
GDataTrojan.GenericKD.42053289
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Mokes.R342448
McAfeeArtemis!0ACAD57502EC
TACHYONBackdoor/W32.NanoCore.866304
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/CI.A
ESET-NOD32a variant of Win32/TrojanDownloader.Autoit.OTO
TencentWin32.Trojan.Miner.Ija
IkarusTrojan-Downloader.PowerShell.Agent
FortinetW32/Autoit.OTO!tr.dldr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360Win32/Trojan.c64

How to remove Win32/TrojanDownloader.Autoit.OTO?

Win32/TrojanDownloader.Autoit.OTO removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment