MSIL/TrojanDownloader.Agent.QRC removal tips

The MSIL/TrojanDownloader.Agent.QRC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/TrojanDownloader.Agent.QRC virus can do?

Authenticode signature is invalid

How to determine MSIL/TrojanDownloader.Agent.QRC?


File Info:
name: 99F1A6BFB0F605551CDD.mlw
path: /opt/CAPEv2/storage/binaries/c772258b218ba597ffa392f388824148f6e2ec20c90681941a99136f087b3bc2
crc32: 10264640
md5: 99f1a6bfb0f605551cdd19e8ab1f0e98
sha1: 157aa265f2a77bd78836ef28abf220ae5ad25a03
sha256: c772258b218ba597ffa392f388824148f6e2ec20c90681941a99136f087b3bc2
sha512: d378389b53059f0f6ec20d364d17cd137c2fed9a69dd32747ffe45f03477013f658b5b4487103b0352c720aeff74dfe167bfb68681a095210dc0bf87a612b1a9
ssdeep: 96:gFlAhvy/0UmzeEIJVrIB2i67YZNiwFFFy9yfi9n/op2Wcdj1xdUXIu:mlrszKZJFe2YxVyrZi89CX9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A7F1D829E7DCC326DEAE0B7DA873D6000BB5F2165413CF0F55A2611E7C273A4C9A4B29
sha3_384: f5059b1520665338c83191aa187b7b0a531b8a96857e18f2e73ad6ab79bbd39bc6efccb07e11b14fdf5276b2c4ccf7e7
ep_bytes: ff250020400000000000000000000000
timestamp: 2024-05-01 10:04:24

Version Info:
0: [No Data]

MSIL/TrojanDownloader.Agent.QRC also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Androm.m!c
AVG	Win32:RATX-gen [Trj]
MicroWorld-eScan	Gen:Trojan.Mardom.MN.15
FireEye	Gen:Trojan.Mardom.MN.15
Skyhigh	BehavesLike.Win32.Generic.zt
McAfee	Artemis!99F1A6BFB0F6
Sangfor	Downloader.Msil.Androm.Vfks
Alibaba	Trojan:MSIL/Mardom.86302d0c
K7GW	Trojan-Downloader ( 005a01891 )
K7AntiVirus	Trojan-Downloader ( 005a01891 )
BitDefenderTheta	Gen:NN.ZemsilF.36804.aiW@auV4lcb
VirIT	Trojan.Win32.MSIL_Heur.A
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.QRC
Kaspersky	HEUR:Backdoor.MSIL.Androm.gen
BitDefender	Gen:Trojan.Mardom.MN.15
Avast	Win32:RATX-gen [Trj]
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Dldr.Agent.ajzxd
VIPRE	Gen:Trojan.Mardom.MN.15
Emsisoft	Gen:Trojan.Mardom.MN.15 (B)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Trojan.Mardom.MN.15
Google	Detected
Avira	TR/Dldr.Agent.ajzxd
MAX	malware (ai score=84)
Kingsoft	malware.kb.c.758
Arcabit	Trojan.Mardom.MN.15
ZoneAlarm	HEUR:Backdoor.MSIL.Androm.gen
Microsoft	Program:Win32/Wacapew.C!ml
ALYac	Gen:Trojan.Mardom.MN.15
Malwarebytes	Generic.Malware/Suspicious
TrendMicro-HouseCall	TROJ_GEN.R002H0CE124
Rising	Backdoor.Androm!8.113 (CLOUD)
Ikarus	Trojan.MSIL.Agent
MaxSecure	Trojan.Malware.73691364.susgen
Fortinet	MSIL/Agent.OXE!tr.dldr
DeepInstinct	MALICIOUS
alibabacloud	Trojan[downloader]:MSIL/Mardom.MT

How to remove MSIL/TrojanDownloader.Agent.QRC?

MSIL/TrojanDownloader.Agent.QRC removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X