Categories: Trojan

Should I remove “Trojan-Dropper.Win32.Scrop.acvi”?

The Trojan-Dropper.Win32.Scrop.acvi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Dropper.Win32.Scrop.acvi virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Latvian
The binary likely contains encrypted or compressed data.
Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-Dropper.Win32.Scrop.acvi?


File Info:
crc32: FAFE25EFmd5: 4f2aa00b44721ea48541eddd5d188cf1name: tmph8rc1jcpsha1: 9c93343a7e0dc8e1625987b938abfac40f97a90asha256: 01482c116edeb30dee36949df0ebd0e5cc31816d93b2d98da37548bec388708asha512: fa26cc98b162f67d0a0b70c4ae3efa839ece0ff7329a39f34cfd71eddb4d3fe235b6f309462d3c232e2fd5f53b6cc1a5e6e83da51904f67f233e178d013c470fssdeep: 12288:Rv+PxMdTx1KjcHim3wLP+mmjDsLL40sZzNE1:APxMdTx1KjcCm3wLP+m0sQxG1type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
InternalName: osf3xswgesv.ixiFileVersionOld: 1.2.0.1ProductVersion: 1.0.4.1Copyrighd: Copyrighd (C) 2020, odfgbivTranslation: 0x0842 0x04c4

Trojan-Dropper.Win32.Scrop.acvi also known as:

Bkav	HW32.Packed.
MicroWorld-eScan	Trojan.GenericKD.34038470
FireEye	Generic.mg.4f2aa00b44721ea4
CAT-QuickHeal	Trojandropper.Scrop
ALYac	Trojan.GenericKD.34038470
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 005690f41 )
BitDefender	Trojan.GenericKD.34038470
K7GW	Trojan ( 005690f41 )
CrowdStrike	win/malicious_confidence_100% (W)
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZexaF.34128.JC0@aGI3Lrmc
F-Prot	W32/Wacatac.BV.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HEDU
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.Generic-8119045-0
GData	Trojan.GenericKD.34038470
Kaspersky	Trojan-Dropper.Win32.Scrop.acvi
Alibaba	TrojanDropper:Win32/Scrop.eb0d93bf
AegisLab	Trojan.Win32.Scrop.b!c
Ad-Aware	Trojan.GenericKD.34038470
Emsisoft	Trojan.GenericKD.34038470 (B)
TrendMicro	TROJ_GEN.R03BC0RFI20
McAfee-GW-Edition	BehavesLike.Win32.Trojan.hc
Trapmine	suspicious.low.ml.score
Sophos	Mal/GandCrab-G
Ikarus	Trojan.Win32.Crypt
Cyren	W32/Wacatac.BV.gen!Eldorado
Antiy-AVL	Trojan[Dropper]/Win32.Scrop
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D20762C6
AhnLab-V3	Trojan/Win32.Danabot.R340798
ZoneAlarm	Trojan-Dropper.Win32.Scrop.acvi
Microsoft	Trojan:Win32/CryptInject.RBA!MTB
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	Packed-GBO!4F2AA00B4472
MAX	malware (ai score=87)
VBA32	BScope.Trojan.AET.281105
Malwarebytes	Trojan.MalPack.GS
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R03BC0RFI20
Rising	Malware.Obscure/Heur!1.9E03 (CLOUD)
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_79%
Fortinet	W32/Kryptik.HEDU!tr
AVG	Win32:PWSX-gen [Trj]
Cybereason	malicious.a7e0dc
Avast	Win32:PWSX-gen [Trj]
Qihoo-360	Win32/Trojan.Dropper.df3