Categories: Malware

Should I remove “Troj/Mocrt-A”?

The Troj/Mocrt-A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Troj/Mocrt-A virus can do?

Injection (inter-process)
Executable code extraction
Injection with CreateRemoteThread in a remote process
Creates RWX memory
Expresses interest in specific running processes
Drops a binary and executes it
Unconventionial language used in binary resources: Arabic (Qatar)
A scripting utility was executed
Attempts to remove evidence of file being downloaded from the Internet
Code injection with CreateRemoteThread in a remote process
Installs itself for autorun at Windows startup
Creates a hidden or system file
Creates a copy of itself

Related domains:

core.spiry.ro

How to determine Troj/Mocrt-A?


File Info:
crc32: EF695A57md5: 14413e75f227f07e56f02dc9c2212e32name: whitelist-tool.exesha1: 1444d7d24b98f9762ada0da8a6d725061c66ec52sha256: 6dfeac7a69db58d2b85474f131e187f3174a7d8d35cd96ea97d33a79d85e06c3sha512: b149e54a48b3a79505f82d5c9e3a70fff7e3f89fde5afe62b1813f2702c5d1e36a266ddc7d112c745f2e0c76a349f795a842b7b71f4963809b7ed5b95979b3c1ssdeep: 1536:FbYoyaC/lwKYGNhs3x09kX/t+Fy6sSxVE0eCK:XyaoG8L9kv47xVE09Ktype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Troj/Mocrt-A also known as:

Bkav	W32.AIDetectVM.malware
MicroWorld-eScan	DeepScan:Generic.Malware.SLlg.A88F8ABB
FireEye	Generic.mg.14413e75f227f07e
CAT-QuickHeal	Trojan.CryptinjectRI.S11160972
Qihoo-360	Win32/Trojan.59e
McAfee	WarzoneRAT-FCNI!14413E75F227
ALYac	DeepScan:Generic.Malware.SLlg.A88F8ABB
Cylance	Unsafe
AegisLab	Trojan.Win32.Agentb.4!c
Sangfor	Malware
K7AntiVirus	Trojan ( 0054d10e1 )
BitDefender	DeepScan:Generic.Malware.SLlg.A88F8ABB
K7GW	Trojan ( 0054d10e1 )
Cybereason	malicious.5f227f
Invincea	heuristic
BitDefenderTheta	AI:Packer.861663E91F
F-Prot	W32/Antiav.C
TrendMicro-HouseCall	TrojanSpy.Win32.MOCRT.SM
Paloalto	generic.ml
ClamAV	Win.Malware.Sllg-7139945-0
GData	DeepScan:Generic.Malware.SLlg.A88F8ABB
Kaspersky	Trojan.Win32.Agentb.jiad
Alibaba	Trojan:Win32/Agentb.3c87f900
NANO-Antivirus	Trojan.Win32.AntiAV.fljozs
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.10b77c23
Endgame	malicious (high confidence)
Sophos	Troj/Mocrt-A
Comodo	TrojWare.Win32.AntiAV.VA@81mmki
F-Secure	Trojan.TR/RedCap.ghjpt
DrWeb	Trojan.PWS.Maria.3
Zillya	Trojan.Agent.Win32.1201785
TrendMicro	TrojanSpy.Win32.MOCRT.SM
McAfee-GW-Edition	BehavesLike.Win32.Dropper.ch
SentinelOne	DFI – Malicious PE
Trapmine	malicious.high.ml.score
Emsisoft	DeepScan:Generic.Malware.SLlg.A88F8ABB (B)
APEX	Malicious
Cyren	W32/Antiav.INDT-0919
Jiangmin	Trojan.Agentb.eab
Webroot	W32.Trojan.Gen
Avira	TR/RedCap.ghjpt
Antiy-AVL	Trojan/Win32.SGeneric
Arcabit	DeepScan:Generic.Malware.SLlg.A88F8ABB
ZoneAlarm	Trojan.Win32.Agentb.jiad
Microsoft	Trojan:Win32/Ursnif.KDS!MTB
AhnLab-V3	Trojan/Win32.RL_Agent.R263895
Acronis	suspicious
VBA32	BScope.TrojanSpy.AveMaria
MAX	malware (ai score=81)
Ad-Aware	DeepScan:Generic.Malware.SLlg.A88F8ABB
Malwarebytes	Backdoor.AveMaria
ESET-NOD32	Win32/Agent.TJS
Rising	Stealer.AveMaria!1.BA1C (CLOUD)
Yandex	Trojan.AntiAV!DUTgE8gwzUM
Ikarus	Trojan.Win32.AntiAV
eGambit	Trojan.Generic
Fortinet	W32/Agent.TJS!tr
AVG	Win32:Malware-gen
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.7175203.susgen