Worm.Autoit.Sychost.A information

The Worm.Autoit.Sychost.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Worm.Autoit.Sychost.A virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Worm.Autoit.Sychost.A?


File Info:
name: B31F2FC3CBE1C7BDB187.mlw
path: /opt/CAPEv2/storage/binaries/fdb55d5497d8cec1223167fd24c1339157dd778bf69afd47ebc5d7c91b129376
crc32: 43C03A08
md5: b31f2fc3cbe1c7bdb187268a300c8e7d
sha1: 3d3f982aa85c602e34643ee393308dfdd9905b8a
sha256: fdb55d5497d8cec1223167fd24c1339157dd778bf69afd47ebc5d7c91b129376
sha512: 4a0c1e1e854921e1f6ded3f6f98a183893df657dac1ec8ed01b2bbcce7822aaa531610dbafc81067464e9a97a386f504934de1c132218e46be5056814d9f565f
ssdeep: 12288:vaWzgMg7P3qniiMErQohh0F4CCJ8lny/+3RvCSQLg/P:yaHMP6iorjqny/+3RaO/P
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13815BF12B3D680F6D9A33971297BE32BEB3575194327C4CBA7E02D779E211009A37762
sha3_384: 1af87a0f252901813795e66c4b3eb15a95c8f0265f1d8ecc0bd442d075baf69799c5ab38c8cf9039cb36f10abeed0dcb
ep_bytes: fe6afe8d54243852ff15f4244800b801
timestamp: 2008-01-22 03:10:50

Version Info:
0: [No Data]

Worm.Autoit.Sychost.A also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
FireEye	Generic.mg.b31f2fc3cbe1c7bd
CAT-QuickHeal	Worm.Autoit.Sychost.A
Skyhigh	BehavesLike.Win32.Generic.cm
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 004bcce41 )
K7GW	Trojan ( 004bcce41 )
Cybereason	malicious.aa85c6
BitDefenderTheta	Gen:NN.ZexaF.36792.3mZ@aOFAxwm
VirIT	Trojan.Win32.Generic.CCO
Elastic	malicious (moderate confidence)
APEX	Malicious
ClamAV	Win.Worm.Autorunvb-7053731-0
Trapmine	malicious.high.ml.score
Sophos	Generic Reputation PUA (PUA)
Ikarus	Worm.Win32.AutoIt
Google	Detected
Varist	W32/Fosniw.N.gen!Eldorado
Antiy-AVL	Trojan/Win32.Wacatac
Kingsoft	Win32.Troj.Unknown.a
Microsoft	Program:Win32/Wacapew.C!ml
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Cynet	Malicious (score: 100)
McAfee	Artemis!B31F2FC3CBE1
DeepInstinct	MALICIOUS
Cylance	unsafe
SentinelOne	Static AI – Malicious PE
Fortinet	PossibleThreat.PALLAS.H
AVG	Win32:Crypt-KOW [Trj]
Avast	Win32:Crypt-KOW [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Worm.Autoit.Sychost.A?

Worm.Autoit.Sychost.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X