Trojan

TrojanDownloader:O97M/EncDoc.QRT!MTB information

Malware Removal

The TrojanDownloader:O97M/EncDoc.QRT!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader:O97M/EncDoc.QRT!MTB virus can do?

  • The office file has a unconventional code page: ANSI Cyrillic; Cyrillic (Windows)
  • The office file contains a macro
  • The office file contains anomalous features

How to determine TrojanDownloader:O97M/EncDoc.QRT!MTB?


File Info:

crc32: ACA8F265
md5: 7d0d0339982b13de4b4de25b321c9eb1
name: upload_file
sha1: 18a8bdbce2e7ad735c048b48d927aa94697dbd82
sha256: f56263ffcff07276139c9152b886f3a875d241ae1198d2f85e506560321998bb
sha512: 5e8b320247be7f99492d5aa7ad5ed116516f461c5cd3ec9321bea687ba5bf5da00986ed8e8e13357792f341a4ccbb4d55ab5d9739541ee19e637db7cfbd6c589
ssdeep: 1536:c17uDphYHceXVhca+fMHLtyeGx2zZ8NOiCBD6yzsFuBCKrRrEYRrq/RWB:c17uDphYHceXVhca+fMHLtyeGx2zZ8N
type: Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Tue Oct 6 11:00:12 2020, Security: 0

Version Info:

0: [No Data]

TrojanDownloader:O97M/EncDoc.QRT!MTB also known as:

CAT-QuickHealTrojan.XLS.Downloader.39295
McAfeeX97M/Downloader!7D0D0339982B
CyrenXF/Downldr.gen
SymantecTrojan.Mdropper
AvastOther:Malware-gen [Trj]
KasperskyHEUR:Trojan.Script.Generic
AegisLabTrojan.Script.Generic.4!c
McAfee-GW-EditionArtemis!Trojan
IkarusTrojan-Downloader.DOC.Agent
MicrosoftTrojanDownloader:O97M/EncDoc.QRT!MTB
ZoneAlarmHEUR:Trojan.Script.Generic
GDataMacro.Trojan-Downloader.Agent.AVJ
ZonerProbably Heur.W97ShellB
ESET-NOD32DOC/TrojanDownloader.Agent.CDN
FortinetMSOffice/Agent.946E!tr
AVGOther:Malware-gen [Trj]
Qihoo-360Generic/Trojan.Script.ed4

How to remove TrojanDownloader:O97M/EncDoc.QRT!MTB?

TrojanDownloader:O97M/EncDoc.QRT!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment