MSIL:Dropper-CG [Drp] information

The MSIL:Dropper-CG [Drp] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL:Dropper-CG [Drp] virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Guard pages use detected – possible anti-debugging.
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Unusual version info supplied for binary

How to determine MSIL:Dropper-CG [Drp]?

File Info:
name: 7CCC792974547754EE63.mlw
path: /opt/CAPEv2/storage/binaries/59354c6a9c5b0d4da0d068cec3d3ec8665115155a93c4871d2a0abd69584d3d2
crc32: 739F9424
md5: 7ccc792974547754ee63b3dd97f7cb84
sha1: e09ae134f1f4cf2f7aad63fc0541331731ca6067
sha256: 59354c6a9c5b0d4da0d068cec3d3ec8665115155a93c4871d2a0abd69584d3d2
sha512: 386d1f76bbf44236a467ea061c623e1288cdddf1ad41f9b46fb6311e7193ae74cb0005ae2e4dc492788bed453d49edb9722942699a1ee8206e2742ecccac9369
ssdeep: 12288:RXPoBb6ykj9rXFOSeLFAiYYQMKXD5dvDFRadnhol2NausravaTu0p2GN3T6tviss:RXPoBb6ykj9o5AiMjvpRmnhlUTF3o55w
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F4251245B7149E07D93A61B484AA039307F4AC656B13FBC7DCCEB1A82ABB3C1449E5D3
sha3_384: fb6806f7766af35f8f17092e9e489852533821f38aaa0bb5a3aed506e9d29bc2e8cc224864bc3692eab68e113fcca1d2
ep_bytes: ff250020400000000000000000000000
timestamp: 2010-04-28 22:09:40

Version Info:
Translation: 0x0000 0x04b0
Comments: Microsoft Tool
CompanyName: Mircosoft District
FileDescription: Mircosoft Helper
FileVersion: 4.1.5.22
InternalName: 1.exe
LegalCopyright: Microsoft
LegalTrademarks: Company Microsoft
OriginalFilename: 1.exe
ProductName: Mircosoft Component
ProductVersion: 4.1.5.22
Assembly Version: 4.1.5.22

MSIL:Dropper-CG [Drp] also known as:

How to remove MSIL:Dropper-CG [Drp]?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.