MSIL/TrojanDownloader.Agent.ADC malicious file

The MSIL/TrojanDownloader.Agent.ADC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/TrojanDownloader.Agent.ADC virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Attempts to create or modify system certificates
Unusual version info supplied for binary

Related domains:

z.whorecord.xyz

a.tomx.xyz

rghost.net

How to determine MSIL/TrojanDownloader.Agent.ADC?


File Info:
crc32: D7815F60
md5: f6b6e07d01c97f1cd6b0480e62c1483b
name: F6B6E07D01C97F1CD6B0480E62C1483B.mlw
sha1: 5c2afae9e8b0b328bf4180eda1a127c174bd0e06
sha256: 4241f43a304e2a7e8030538c2472d0d50f339f8c04be4971d5ad6148f8ccca1d
sha512: 87b74ab48583b7c06e670c145f0a2b4af00417f1a13568d114e2e83d3b3fed92c9b8d5e7347618488f549b2facefb4868291578afad6f26eba5e8e4cd72b7eca
ssdeep: 1536:JuhRb6EGZZEi9JIAGM/UCqCDAR6qQ8TS7cijI+QbPX37G81:J6mPE6L/nAR6qQ8TSnAn7GM
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: xa9 2003 - 2014 Skype and/or Microsoft
Assembly Version: 6.19.0.0
InternalName: Skype.exe
FileVersion: 6.19.0.0
CompanyName: Skype Technologies S.A
Comments: Skype
ProductName: Skype
ProductVersion: 6.19.0.0
FileDescription: Skype
OriginalFilename: Skype.exe

MSIL/TrojanDownloader.Agent.ADC also known as:

DrWeb	BackDoor.Bladabindi.1705
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Ursu.836470
CrowdStrike	win/malicious_confidence_90% (W)
K7GW	Trojan-Downloader ( 004e9c421 )
Cybereason	malicious.d01c97
Symantec	MSIL.Downloader!gen7
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.ADC
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Trojan.Win32.Snojan.boio
BitDefender	Gen:Variant.Ursu.836470
NANO-Antivirus	Trojan.Win32.Bladabindi.dkknqf
MicroWorld-eScan	Gen:Variant.Ursu.836470
Tencent	Win32.Trojan.Snojan.Eeqw
Ad-Aware	Gen:Variant.Ursu.836470
Sophos	Mal/Generic-S
Comodo	Malware@#2tgcrna3ocoel
BitDefenderTheta	Gen:NN.ZemsilF.34170.mq0@a80pUnd
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Variant.Ursu.836470
Emsisoft	Gen:Variant.Ursu.836470 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Dldr.Agent.yqceo
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Ursu.836470
AhnLab-V3	Trojan/Win.Generic.C4666330
McAfee	Artemis!F6B6E07D01C9
MAX	malware (ai score=84)
TrendMicro-HouseCall	TROJ_GEN.R02DC0WJ321
Ikarus	Trojan.SuspectCRC
Fortinet	MSIL/Small.KK!tr.dldr
AVG	Win32:Trojan-gen

How to remove MSIL/TrojanDownloader.Agent.ADC?

MSIL/TrojanDownloader.Agent.ADC removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSIL/TrojanDownloader.Agent.ADC malicious file