Trojan

MSIL/TrojanDropper.Agent.ECR (file analysis)

Malware Removal

The MSIL/TrojanDropper.Agent.ECR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSIL/TrojanDropper.Agent.ECR virus can do?

    How to determine MSIL/TrojanDropper.Agent.ECR?

    

    File Info:
    
crc32: 8D191ED1
    md5: 9f26cf0d07c157e2d82ffcb9da9abed8
    name: 9F26CF0D07C157E2D82FFCB9DA9ABED8.mlw
    sha1: a48da1635ea27e22b4c12fbfb7612d7aa4877588
    sha256: 7ca6ef900a2c47805bfbc24d5df2e710286bb10fd4134b3e4035b47b95446f77
    sha512: 98b095e20be2829cf9e1f110e6643f0ab2569237c31db99a2c409caf519c60e7a7b954c13c687358ed7056b997bfe76140660fbf8db09d85e19806a65e36b9be
    ssdeep: 3072:8x0ea2WdNB1L7m0EhjyOjtwfnlvBvmBut8S6AJQ6J/E0jyVW6oO4pg7c:1UBUlvQH0jysfp
    type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
    

    Version Info:
    
Translation: 0x0000 0x04b0
    LegalCopyright: Copyright xa9 MidnightCrypt 2018
    Assembly Version: 1.0.0.0
    InternalName: Setup.exe
    FileVersion: 1.0.0.0
    CompanyName: Microsoft
    LegalTrademarks: 
    Comments: 
    ProductName: MidnightCrypt
    ProductVersion: 1.0.0.0
    FileDescription: MidnightCrypt
    OriginalFilename: Setup.exe

    MSIL/TrojanDropper.Agent.ECR also known as:

    K7AntiVirusTrojan ( 700000121 )
    Elasticmalicious (high confidence)
    CynetMalicious (score: 85)
    CylanceUnsafe
    SangforTrojan.Win32.Save.a
    AlibabaTrojan:MSIL/GandCrypt.dadd4bc1
    K7GWTrojan ( 700000121 )
    SymantecML.Attribute.HighConfidence
    ESET-NOD32a variant of MSIL/TrojanDropper.Agent.ECR
    APEXMalicious
    AvastWin32:Malware-gen
    ClamAVWin.Packed.Hesv-9779930-0
    KasperskyHEUR:Trojan-Ransom.MSIL.GandCrypt.gen
    TencentMsil.Trojan.Gandcrypt.Huze
    SophosMal/Generic-S
    ComodoMalware@#2oy6kmlccepo0
    BitDefenderThetaGen:NN.ZemsilF.34608.pm0@aGamIcl
    McAfee-GW-EditionArtemis!Trojan
    SentinelOneStatic AI – Malicious PE
    WebrootW32.Adware.Installcore
    AviraHEUR/AGEN.1111903
    MicrosoftTrojan:Win32/Occamy.C
    AegisLabTrojan.MSIL.GandCrypt.4!c
    McAfeeArtemis!9F26CF0D07C1
    VBA32TScope.Trojan.MSIL
    PandaTrj/GdSda.A
    RisingRansom.GandCrypt!8.F33E (CLOUD)
    YandexTrojan.GandCrypt!fMPssNM4Iec
    IkarusTrojan-Proxy.Agent
    FortinetW32/GandCrypt!tr
    AVGWin32:Malware-gen
    Paloaltogeneric.ml
    Qihoo-360Win32/Ransom.GandCrab.HgIASOoA

    How to remove MSIL/TrojanDropper.Agent.ECR?

    MSIL/TrojanDropper.Agent.ECR removal tool
    • Download and install GridinSoft Anti-Malware.
    • Open GridinSoft Anti-Malware and perform a “Standard scan“.
    • “Move to quarantine” all items.
    • Open “Tools” tab – Press “Reset Browser Settings“.
    • Select proper browser and options – Click “Reset”.
    • Restart your computer.

    You may also like

    About the author

    Paul Valéry

    I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

    View all posts

    Leave a Comment