Categories: Trojan

Trojan.Agent.CRIO removal

The Trojan.Agent.CRIO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.CRIO virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Reads data out of its own binary image
Performs some HTTP requests
Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
Checks for the presence of known windows from debuggers and forensic tools
Attempts to execute a binary from a dead or sinkholed URL
Installs itself for autorun at Windows startup
Detects VirtualBox through the presence of a registry key

Related domains:

zaltzburgopportunity.top

corruptionobedienceorderskiing.tk

How to determine Trojan.Agent.CRIO?


File Info:
crc32: F0C043A6md5: 62ae37d640f67fcbecd6b66ef1aa78e1name: 62AE37D640F67FCBECD6B66EF1AA78E1.mlwsha1: 9a1a72d3325599eb396bd312ee15614ed4030e82sha256: f91cf1905b041ea927f29ff6e9c306c33693d66dbd6fb0b9bf8e03d5f745fae0sha512: b3a25c0edb09fb742ddca895d9fdb2d4bef1ba3f21b534bf67d9c5b37982732c59c13874d62ddb95a6f5b989f5ffae0ee0a97e572e9301a0c1e1aeda4e835b02ssdeep: 3072:2mnRIDTFrMh3ETyaqRScNe19BxBP+zHebMGXFzQEB2J4CQP7IKjLedGYw:bRIDBrMO/qRZNe19ZPF227IKjadGRtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2017InternalName: stub.exeFileVersion: 1.0.0.1CompanyName: TODO: ProductName: TODO: ProductVersion: 1.0.0.1FileDescription: TODO: OriginalFilename: stub.exeTranslation: 0x0419 0x04b0

Trojan.Agent.CRIO also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Agent.CRIO
CAT-QuickHeal	Trojan.Generic
McAfee	GenericR-LBD!62AE37D640F6
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan-Downloader ( 0051c78c1 )
BitDefender	Trojan.Agent.CRIO
K7GW	Trojan-Downloader ( 0051c78c1 )
Cybereason	malicious.640f67
BitDefenderTheta	Gen:NN.ZexaF.34804.tu2@amHNkvgk
Cyren	W32/S-dfd211d5!Eldorado
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Inject.evqomk
AegisLab	Trojan.Win32.Inject.4!c
Tencent	Malware.Win32.Gencirc.10b23b26
Ad-Aware	Trojan.Agent.CRIO
TACHYON	Trojan/W32.Inject.324608.G
Emsisoft	Trojan.Agent.CRIO (B)
Comodo	Application.Win32.DLBoost.H@7fexu7
F-Secure	Heuristic.HEUR/AGEN.1115396
Zillya	Downloader.Tovkater.Win32.667
TrendMicro	HT_TOVKATER_GL0400BB.UVPM
McAfee-GW-Edition	GenericR-LBD!62AE37D640F6
FireEye	Generic.mg.62ae37d640f67fcb
Sophos	Mal/Generic-S
Ikarus	Trojan-Downloader.Win32.Tovkater
Jiangmin	Trojan.Generic.fwmfe
eGambit	Unsafe.AI_Score_99%
Avira	HEUR/AGEN.1115396
Antiy-AVL	Trojan/Win32.Inject
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Agent.CRIO
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Trojan.Agent.CRIO
Cynet	Malicious (score: 85)
AhnLab-V3	Trojan/Win32.Inject.C2289986
Acronis	suspicious
VBA32	BScope.Trojan.Tiggre
ALYac	Trojan.Agent.CRIO
MAX	malware (ai score=99)
Malwarebytes	Trojan.Agent
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/TrojanDownloader.Tovkater.HQ
TrendMicro-HouseCall	HT_TOVKATER_GL0400BB.UVPM
Rising	Trojan.Generic@ML.87 (RDMK:Pp7eqyTesYkgry6KnZ+Gew)
Yandex	Trojan.Inject!feCDzq4av48
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Tovkater.HQ!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_70% (D)
Qihoo-360	Win32/Trojan.41f