Categories: Trojan

Trojan.Agent.CILL removal instruction

The Trojan.Agent.CILL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.CILL virus can do?

Presents an Authenticode digital signature
Installs itself for autorun at Windows startup
Exhibits possible ransomware file modification behavior
Writes a potential ransom message to disk
Network activity detected but not expressed in API logs
Collects information to fingerprint the system
Anomalous binary characteristics

How to determine Trojan.Agent.CILL?


File Info:
crc32: 34F88146md5: c0653168f5c01c231765881ddbfaf550name: C0653168F5C01C231765881DDBFAF550.mlwsha1: bbad2fb4bae296b0fd0b80e30543162194f9edf7sha256: 291d1423b9d965742a9164a754dc9526dc10b85c7fc2a7bc5add5844c5334694sha512: c9964479a4c789c4d1b988c0cba7c256a226b8c80467fe044a3455e9566e5c6ba3b7838d09a93fd651a51163cd55f0962a00d113b94b92d75019081f0759ce68ssdeep: 3072:OwcFg4+DuvnN3hT9GvfgPJCICyzFjsR+HtkMoAG+/iHnbnLscjYooTZSgJv3KaNc:0FBTgkFY4kMExI2AKaNctype: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Version Info:
LegalCopyright: LegalCopyrightInternalName: InternalNameFileVersion: 1,0,0,0CompanyName: CompanyNameLegalTrademarks: LegalTrademarksProductName: ProductNameProductVersion: 1,0,0,0FileDescription: FileDescriptionOriginalFilename: OriginalFilenameTranslation: 0x0409 0x04e4

Trojan.Agent.CILL also known as:

K7AntiVirus	Trojan ( 004cceee1 )
DrWeb	Trojan.Encoder.3614
Cynet	Malicious (score: 99)
CAT-QuickHeal	Ransom.Sarento.MUE.JV7
ALYac	Trojan.Agent.CILL
Cylance	Unsafe
Zillya	Trojan.SarentoCRTD.Win32.5124
Alibaba	Trojan:Win32/Sarento.2408cb07
K7GW	Trojan ( 004cceee1 )
Cybereason	malicious.8f5c01
Symantec	Ransom.EncryptorRaaS
ESET-NOD32	a variant of Win32/Filecoder.NFP
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Raas.a
BitDefender	Trojan.Agent.CILL
NANO-Antivirus	Trojan.Win32.Raas.ecnkty
ViRobot	Trojan.Win32.Z.Ransom.939352
MicroWorld-eScan	Trojan.Agent.CILL
Tencent	Win32.Trojan.Raas.Svqr
Ad-Aware	Trojan.Agent.CILL
Comodo	Malware@#12y5368kwld8x
VIPRE	Trojan.Win32.Generic!BT
FireEye	Generic.mg.c0653168f5c01c23
Emsisoft	Trojan.Agent.CILL (B)
Avira	TR/Sarento.939352
Microsoft	Ransom:Win32/Sarento.B
GData	Win32.Trojan-Ransom.RaaS.F
AhnLab-V3	Trojan/Win32.Sarento.R169806
McAfee	Artemis!C0653168F5C0
MAX	malware (ai score=80)
VBA32	BScope.Trojan.Raas
Panda	Generic Suspicious
TrendMicro-HouseCall	TROJ_GEN.R002C0ODS21
Rising	Trojan.Filecoder!8.68 (CLOUD)
Yandex	Trojan.GenAsa!qe4TqecDLh8
Ikarus	Trojan-Ransom.Sarento
AVG	Win32:Malware-gen
Paloalto	generic.ml