Skip to main content
Skip to main content
Microsoft Security Intelligence
Published Mar 01, 2011 | Updated Sep 15, 2017


Detected by Microsoft Defender Antivirus

Aliases: Worm/Win32.AutoIt (AhnLab) Trojan-Spy.Win32.AutoIt.p (Kaspersky) Worm/Autoit.ANVE (AVG) TR/Spy.Babonock.A (Avira) Win32/Autoit.HG worm (ESET) Trojan-Spy.Win32.Babonock (Ikarus) Mal/Babonock-A (Sophos) W32.Harakit (Symantec) TROJ_SPNR.07JT11 (Trend Micro)


TrojanSpy:Win32/Babonock.A is a trojan that collects information about your computer, which it then sends to a remote server.

To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:

This threat may make lasting changes to a computer's configuration that are NOT restored by detecting and removing this threat. For more information on returning an infected computer to its pre-infected state, please see the following articles:

Follow us