Categories: Trojan

What is “Win32/TrojanDownloader.Autoit.OWA”?

The Win32/TrojanDownloader.Autoit.OWA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.Autoit.OWA virus can do?

A process created a hidden window
Uses Windows utilities for basic functionality
Deletes its original binary from disk
Creates a hidden or system file
Attempts to modify proxy settings
Uses suspicious command line tools or Windows utilities

How to determine Win32/TrojanDownloader.Autoit.OWA?


File Info:
crc32: 276A6785md5: fe45dcfd7a10c519fcf9bb68181bbd78name: dmomacpmo.exesha1: 8926c5b774a1a59599e691ebb0ed2512a628a6d5sha256: ac08c0d2fa339a59dbf99947d33fc9104123eae25433b4cf1b3a9c18f9f38063sha512: b1dc4fa1f4761a597ee79935cfcd948c86b391ef05865fd5395d8b026e21bebcecf8f42398fb6ba843826885d63fe2d8982c57e302f43eeddafaf1a70236ed68ssdeep: 24576:MAHnh+eWsN3skA4RV1Hom2KXMmHaIID5:rh+ZkldoPK8YaIItype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.InternalName: DmOmaCpMoFileVersion: 10.0.17134.1 (WinBuild.160101.0800)CompanyName: Microsoft CorporationProductName: Microsoftxae Windowsxae Operating SystemProductVersion: 10.0.17134.1FileDescription: Host Process for OMA-CP ClientOriginalFilename: DmOmaCpMo.exeTranslation: 0x0409 0x04b0

Win32/TrojanDownloader.Autoit.OWA also known as:

Bkav	W32.AIDetectVM.malware2
MicroWorld-eScan	Gen:Trojan.Heur.AutoIT.2
FireEye	Gen:Trojan.Heur.AutoIT.2
Qihoo-360	Generic/HEUR/QVM10.2.98BF.Malware.Gen
McAfee	RDN/Generic Downloader.x
Malwarebytes	Trojan.Downloader.AutoIt
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 700000111 )
BitDefender	Gen:Trojan.Heur.AutoIT.2
K7GW	Trojan ( 700000111 )
Cybereason	malicious.d7a10c
TrendMicro	TROJ_GEN.R067C0PC520
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
GData	Gen:Trojan.Heur.AutoIT.2
Kaspersky	HEUR:Trojan.Script.CoinMiner.gen
Alibaba	TrojanDownloader:Win32/Autoit.8e3b0a65
NANO-Antivirus	Trojan.Win32.AutoIT.hddijm
ViRobot	Trojan.Win32.Z.Wacatac.841728
AegisLab	Hacktool.Win32.Gamehack.3!e
Ad-Aware	Gen:Trojan.Heur.AutoIT.2
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1035735
DrWeb	Trojan.Siggen9.16752
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.PWSYunsip.ch
Emsisoft	Gen:Trojan.Heur.AutoIT.2 (B)
Ikarus	Trojan-Downloader.Win32.AutoIt
Cyren	W32/Trojan.GKKW-4185
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1035735
Endgame	malicious (high confidence)
Arcabit	Trojan.Heur.AutoIT.2
ZoneAlarm	HEUR:Trojan.Script.CoinMiner.gen
Microsoft	Trojan:Win32/Occamy.C
AhnLab-V3	Malware/Gen.Generic.C1107450
BitDefenderTheta	AI:Packer.44866B6B18
MAX	malware (ai score=100)
VBA32	Trojan.Wacatac
Cylance	Unsafe
ESET-NOD32	a variant of Win32/TrojanDownloader.Autoit.OWA
TrendMicro-HouseCall	TROJ_GEN.R067C0PC520
Tencent	Win32.Trojan-downloader.Generic.Efar
eGambit	Unsafe.AI_Score_79%
Fortinet	W32/Generic!tr.dldr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)