Categories: Trojan

MSIL/TrojanDownloader.Agent.ERE removal instruction

The MSIL/TrojanDownloader.Agent.ERE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/TrojanDownloader.Agent.ERE virus can do?

Behavioural detection: Executable code extraction – unpacking
CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the shellcode patterns malware family
Yara detections observed in process dumps, payloads or dropped files

How to determine MSIL/TrojanDownloader.Agent.ERE?


File Info:
name: EA5C6E550A887B8F83B7.mlwpath: /opt/CAPEv2/storage/binaries/7cc766c5ba5664cdd725fc2045d9760ff5bed6457903d712f508e0f4f00f647dcrc32: A90AC2F5md5: ea5c6e550a887b8f83b748408a9f8f62sha1: 9536244f512440df775ee8805daaf68b7b3e0143sha256: 7cc766c5ba5664cdd725fc2045d9760ff5bed6457903d712f508e0f4f00f647dsha512: 5a959020cc5b8f2c7d67e8d9e546aa5306a8a31eb911f9b3701cebb0fa3457cf5563cdc2b91d53090539dacda8d4b79055a9a5f45b3c37726d085b42cd239594ssdeep: 6144:QfLQRoHRZjLZZRitkaDdjCtvkN0ArrTMyiT6wtplOZx0msmytg4IssFsyiv+IHmw:Qf5JZRiFCtvA0ArfMF9m1bsxyimIHmwtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T106B42B177AD65D0FEC752E368AEBBA08469CED210D43C71B22A6717BD52930BCC3A5C4sha3_384: 742a2db1e8c7f5dcfb32501dc601c7587cb7f9fffb11ce1de63a8ff08cfa80cefd673a7fca3e8b8cfad7df58df6664d5ep_bytes: ff250020400000000000000000000000timestamp: 2018-06-13 05:48:21
Version Info:
Translation: 0x0000 0x04b0FileDescription:  FileVersion: 1.0.0.0InternalName: 1254765.exeLegalCopyright: Copyright ©  2018OriginalFilename: 1254765.exeProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

MSIL/TrojanDownloader.Agent.ERE also known as:

Bkav	W32.AIDetectMalware.CS
AVG	Win32:DropperX-gen [Drp]
MicroWorld-eScan	Trojan.MSIL.Basic.6.Gen
FireEye	Generic.mg.ea5c6e550a887b8f
CAT-QuickHeal	Trojan.MsilFC.S20327498
Skyhigh	Generic.dva
McAfee	Generic.dva
Cylance	unsafe
Zillya	Trojan.Crypt.Win32.43563
Sangfor	Suspicious.Win32.Save.a
Alibaba	Trojan:MSIL/Tasker.0f153434
K7GW	Trojan ( 005302041 )
K7AntiVirus	Trojan ( 005302041 )
VirIT	Trojan.Win32.Nanocore.X
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.ERE
APEX	Malicious
Avast	Win32:DropperX-gen [Drp]
Kaspersky	HEUR:Trojan.MSIL.Agent.gen
BitDefender	Trojan.MSIL.Basic.6.Gen
NANO-Antivirus	Trojan.Win32.Dwn.fedhpq
ViRobot	Trojan.Win32.Z.Agent.507904.VF
Tencent	Msil.Trojan-Downloader.Ader.Ztjl
Emsisoft	Trojan-Downloader.Agent (A)
F-Secure	Heuristic.HEUR/AGEN.1306855
DrWeb	Trojan.Nanocore.23
VIPRE	Trojan.MSIL.Basic.6.Gen
TrendMicro	TROJ_DYNAMER.THFAHAH
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Jiangmin	Trojan.MSIL.jlti
Webroot	W32.Trojan.Gen
Varist	W32/MSIL_Agent.BF.gen!Eldorado
Avira	HEUR/AGEN.1306855
MAX	malware (ai score=99)
Antiy-AVL	Trojan/MSIL.Crypt
Kingsoft	Win32.Troj.Unknown.a
Microsoft	Trojan:MSIL/Tasker.G!MTB
Xcitium	Malware@#ikn81h53r09a
Arcabit	Trojan.MSIL.Basic.6.Gen
ZoneAlarm	HEUR:Trojan.MSIL.Agent.gen
GData	Trojan.MSIL.Basic.6.Gen
Google	Detected
AhnLab-V3	Trojan/Win32.Dynamer.R250648
BitDefenderTheta	Gen:NN.ZemsilF.36804.Fm0@aiNW5mo
ALYac	Trojan.MSIL.Basic.6.Gen
VBA32	Downloader.MSIL.gen.rexp
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_DYNAMER.THFAHAH
Rising	Downloader.Agent!8.B23 (CLOUD)
Yandex	Trojan.Crypt!6O1fvKGZaFs
Ikarus	Trojan-Downloader.MSIL.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.ERE!tr.dldr
DeepInstinct	MALICIOUS
alibabacloud	Backdoor:MSIL/Bladabhindi.J!MTB