Trojan.MSIL.Droma removal tips

The Trojan.MSIL.Droma is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.MSIL.Droma virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.MSIL.Droma?


File Info:
crc32: 9BE81122
md5: 58b1b42e5a73b8f73911daba703dfee4
name: setup.exe
sha1: ad31848ead00fd8f0c55d057c5b62eb7b2675a26
sha256: 5b3f2ada3cde288e23ca90a6f3153e8e0b949265850db630efa4e4f82574a607
sha512: 2933086b742c8b98c5fb5340d208d2608dea6b8a166dff10f25385cd55bf8c5407601653a219e439a3e60ed0d64c091413cca01c572adc9abd9c3ed3a3879071
ssdeep: 24576:4yItQAstOS+PUtB2ZMbh86h3yMAAFI6kbfA3vOdOxMuBRUq:4yhbOSSUGybh8nMAkm8vP1aq
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion:                     
CompanyName: Jonas Habel - Individuelle Systemsoftware                   
Comments: This installation was built with Inno Setup.
ProductName: NSGB Verwaltung                                             
ProductVersion: 13                                                
FileDescription: NSGB Verwaltung Setup                                       
Translation: 0x0000 0x04b0

Trojan.MSIL.Droma also known as:

McAfee	Artemis!58B1B42E5A73
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.MSIL.Droma.gen
Alibaba	Trojan:MSIL/Droma.5ef867df
Sophos	Mal/Generic-S
Antiy-AVL	Trojan/MSIL.Droma
ZoneAlarm	HEUR:Trojan.MSIL.Droma.gen
TrendMicro-HouseCall	TROJ_GEN.R002H07GA20
Rising	Trojan.Droma!8.DE9 (CLOUD)
Fortinet	W32/Droma!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Trojan.MSIL.Droma?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.MSIL.Droma removal tips