Worm

How to remove “Worm.Autoit.Rush”?

Malware Removal

The Worm.Autoit.Rush is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm.Autoit.Rush virus can do?

  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

How to determine Worm.Autoit.Rush?


File Info:

crc32: 8BA8C758
md5: ab3043c5d36623ffef25cc441395a8b5
name: AB3043C5D36623FFEF25CC441395A8B5.mlw
sha1: 972a4dbc9695ab804708124ab5c5ce7eb4cd0704
sha256: 8d0970bfad3d81e3dd04f57382a3ef507ddc8c2615c4079260435bf2e07556df
sha512: 6a64c1ec35e28339130089fe21f0d8edea6288884a343b6c49c25ad6c929258e809a68d40a2b6f1013f9816f650166911cea085a866f7a078e7070590cbf5e73
ssdeep: 98304:sE3JE3JE3dE3PE3HE3rE3VE3jE30E3eE3JE3JE3dE3Y:/
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
FileVersion: 3, 3, 8, 1
FileDescription:
Translation: 0x0809 0x04b0

Worm.Autoit.Rush also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 700000111 )
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop3.52876
CynetMalicious (score: 100)
CAT-QuickHealTrojan.AutoIt.Pistolar.A
ALYacTrojan.GenericKD.47235340
CylanceUnsafe
ZillyaTrojan.AutoIT.Win32.153840
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 700000111 )
Cybereasonmalicious.5d3662
BaiduAutoIt.Worm.Agent.a
CyrenW32/AutoIt.SG.gen!Eldorado
SymantecW32.SillyFDC
ESET-NOD32Win32/Autoit.HZ
APEXMalicious
AvastAutoIt:Agent-DP [Trj]
ClamAVWin.Malware.Autoit-6981134-0
KasperskyTrojan.Win32.Autoit.blz
BitDefenderTrojan.GenericKD.47235340
NANO-AntivirusTrojan.Script.AutoIt.dbycns
MicroWorld-eScanTrojan.GenericKD.47235340
Ad-AwareTrojan.GenericKD.47235340
SophosML/PE-A + W32/AutoIt-QA
ComodoTrojWare.Win32.Autoit.n@4p0xzq
BitDefenderThetaAI:Packer.05DA809615
VIPREWorm.Win32.Autoit.qa (v)
McAfee-GW-EditionBehavesLike.Win32.AutoitDropper.rc
FireEyeGeneric.mg.ab3043c5d36623ff
EmsisoftTrojan.GenericKD.47235340 (B)
JiangminTrojan.MSIL.Zapchast.ag
AviraTR/Rogue.JH.7554630
Antiy-AVLTrojan/Generic.ASSuf.23200
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ArcabitTrojan.Generic.D2D0C10C
GDataTrojan.GenericKD.47235340
AhnLab-V3Win-Trojan/Autoit.305824
McAfeeGenericRXHC-HT!AB3043C5D366
MAXmalware (ai score=87)
VBA32Worm.Autoit.Rush
PandaTrj/Autoit.gen
RisingDropper.Pistolar/Autoit!1.A603 (CLASSIC)
IkarusTrojan.Win32.Autoit
MaxSecureWin.MxResIcn.Heur.Gen
FortinetW32/Autoit.HZ!worm
AVGAutoIt:Agent-DP [Trj]

How to remove Worm.Autoit.Rush?

Worm.Autoit.Rush removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment