Trojan

MSIL/TrojanDropper.Agent.FIO removal

Malware Removal

The MSIL/TrojanDropper.Agent.FIO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSIL/TrojanDropper.Agent.FIO virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Guard pages use detected – possible anti-debugging.
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • A process created a hidden window
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Uses Windows utilities for basic functionality
  • A script process created a new process
  • Creates a hidden or system file
  • Attempts to execute suspicious powershell command arguments
  • Binary compilation timestomping detected

How to determine MSIL/TrojanDropper.Agent.FIO?



File Info:

name: 2EB7D58A71C6A56B4C6E.mlw
path: /opt/CAPEv2/storage/binaries/f2940da81a037552408427beeb093eb955f3e548b04f4e4292b1ce1a1784ffda
crc32: A66A5FF2
md5: 2eb7d58a71c6a56b4c6edabf0c8e6a83
sha1: e48edf375fbe008ee14a5cd541468ecb9d981f1f
sha256: f2940da81a037552408427beeb093eb955f3e548b04f4e4292b1ce1a1784ffda
sha512: 93a7157d82763a8b99c27967c62178fe6d6976a3ce23333812f301ec0b212431c9f0f085bc9485796dd7f378409beeb75933dcffa637acb5dcd9ce395198e484
ssdeep: 3072:OJRkhNqmPPP1NMpqBbh+TmG3SE72MEt4u4ODBhdGd3JthUpHftCEZfx/0ZBew+P+:vhNLB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AA84B63DCC68423FC2B7D23DC9CA8A07F896491B371DED4AA0D773965523183B99216E
sha3_384: b3b5f8a2a5f1505b9a64bcb5722d33c5535836acd70c35eddacfebcde233b4007452d97ef4cb76a393499b3039d3a765
ep_bytes: ff250020400000000000000000000000
timestamp: 2056-06-23 06:00:10


Version Info:

Translation: 0x0000 0x04b0
Comments: TOR
CompanyName: TOR
FileDescription: TOR
FileVersion: 1.0.0.0
InternalName: TOR.exe
LegalCopyright: TOR
LegalTrademarks: TOR
OriginalFilename: TOR.exe
ProductName: TOR
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/TrojanDropper.Agent.FIO also known as:

LionicTrojan.Win32.Malicious.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Heur.MSIL.Bladabindi.1
FireEyeGeneric.mg.2eb7d58a71c6a56b
McAfeeRDN/AsyncRAT
CylanceUnsafe
ZillyaDropper.Agent.Win32.468069
SangforTrojan.Win32.Sabsik.FL
K7AntiVirusTrojan ( 0058b94b1 )
AlibabaTrojan:MSIL/DropperX.6407b58f
K7GWTrojan ( 0058b94b1 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaGen:NN.ZemsilF.34114.ym0@amqnEtn
CyrenW32/MSIL_Agent.CMK.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32MSIL/TrojanDropper.Agent.FIO
TrendMicro-HouseCallTROJ_FRS.VSNTL921
Paloaltogeneric.ml
BitDefenderGen:Heur.MSIL.Bladabindi.1
NANO-AntivirusTrojan.Win32.Drop.jjhbgb
AvastWin32:DropperX-gen [Drp]
TencentMsil.Trojan.Msil.Hvjr
Ad-AwareGen:Heur.MSIL.Bladabindi.1
EmsisoftGen:Heur.MSIL.Bladabindi.1 (B)
ComodoMalware@#43lilirl166q
TrendMicroTROJ_FRS.VSNTL921
McAfee-GW-EditionRDN/AsyncRAT
SophosMal/Generic-S
APEXMalicious
GDataGen:Heur.MSIL.Bladabindi.1
JiangminHeur.MSIL.ahk
AviraTR/Drop.Agent.erfhb
MAXmalware (ai score=85)
Antiy-AVLTrojan/Generic.ASMalwS.34E7958
GridinsoftRansom.Win32.Bladabindi.sa
ViRobotTrojan.Win32.Z.Agent.404480.TY
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
AhnLab-V3Dropper/Win.AsyncRAT.C4878218
MalwarebytesBackdoor.Bladabindi
IkarusTrojan-Dropper.MSIL.Agent
YandexTrojan.DR.Agent!PdsyiqN+/68
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Agent.FIO!tr
AVGWin32:DropperX-gen [Drp]
Cybereasonmalicious.a71c6a

How to remove MSIL/TrojanDropper.Agent.FIO?

MSIL/TrojanDropper.Agent.FIO removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment