Trojan

Win32/TrojanDownloader.Autoit.OYY removal tips

Malware Removal

The Win32/TrojanDownloader.Autoit.OYY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/TrojanDownloader.Autoit.OYY virus can do?

  • Executable code extraction
  • Creates RWX memory
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Executed a very long command line or script command which may be indicative of chained commands or obfuscation
  • A scripting utility was executed
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Attempts to execute a powershell command with suspicious parameter/s
  • Creates a hidden or system file
  • Attempts to create or modify system certificates

Related domains:

paste.ee

How to determine Win32/TrojanDownloader.Autoit.OYY?


File Info:

crc32: 4F53553A
md5: 6e4f4002daa2777d426917cacd78365b
name: 1987.jpg
sha1: e47c2eb0e1c03a1dc6aff5f50b0496b95a912e79
sha256: 33c6ee7a542e3169417794540198e55530570366e4b52b3ef915ab8a9a9840ef
sha512: 19e0c2ad50e970fc17effeb289903747a0e6ae5de2325ed0770bb434d188f8f374f02e670f360a50b20f6e58f12e67169368f21f2aa416b327e203a2e4dd9444
ssdeep: 24576:1AHnh+eWsN3skA4RV1Hom2KXMmHacdq5:kh+ZkldoPK8YacK
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Win32/TrojanDownloader.Autoit.OYY also known as:

BkavW32.AIDetectVM.malware1
MicroWorld-eScanTrojan.GenericKD.34071697
FireEyeGeneric.mg.6e4f4002daa2777d
Qihoo-360Generic/HEUR/QVM10.2.24BB.Malware.Gen
ALYacTrojan.GenericKD.34071697
MalwarebytesTrojan.Downloader.AutoIt
AegisLabHacktool.Win32.Gamehack.3!e
SangforMalware
K7AntiVirusTrojan-Downloader ( 005696be1 )
BitDefenderTrojan.GenericKD.34071697
K7GWTrojan-Downloader ( 005696be1 )
Cybereasonmalicious.0e1c03
ArcabitTrojan.Generic.D207E491
Invinceaheuristic
ESET-NOD32a variant of Win32/TrojanDownloader.Autoit.OYY
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan.Win32.Povertel.avd
AlibabaTrojanDownloader:Win32/Autoit.d6404360
Ad-AwareTrojan.GenericKD.34071697
EmsisoftTrojan.GenericKD.34071697 (B)
F-SecureHeuristic.HEUR/AGEN.1100137
TrendMicroTROJ_FRS.VSNTFP20
FortinetPossibleThreat.MU
SophosMal/Generic-S
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1100137
MAXmalware (ai score=81)
MicrosoftTrojan:Win32/Wacatac.C!ml
ZoneAlarmTrojan.Win32.Povertel.avd
CynetMalicious (score: 90)
McAfeeRDN/Generic Downloader.x
TrendMicro-HouseCallTROJ_FRS.VSNTFP20
IkarusWin32.Outbreak
eGambitUnsafe.AI_Score_94%
GDataTrojan.GenericKD.34071697
AVGFileRepMalware

How to remove Win32/TrojanDownloader.Autoit.OYY?

Win32/TrojanDownloader.Autoit.OYY removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment