How to remove “Trojan:Win32/Meredrop”?

The Trojan:Win32/Meredrop is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Meredrop virus can do?

Executable code extraction
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan:Win32/Meredrop?


File Info:
crc32: 36C71790
md5: bcb80b113e42d5227ce7280251aa5bcf
name: SmartTranslit-1.1.exe
sha1: 44174afcab21dbef5e832755566c0f3ac1b06c15
sha256: ec6fa802c19af512d4119ff1a8dbeff01e89d4f8294f98e6652b5c4f47d27eb6
sha512: 0b750ca4aadbc692a175bc38942a55d0893a5ea16b7fcca96b60bea68603a7f68c1006b500a6b4130fb15eaa71928630fa623a7187cc0ecd7e343043b7b9baca
ssdeep: 384:YbIEwoYNXS/lpqxiwrpmQ1n7vq6E6rQ5Ab9cPNkCQiGtfguKycYjkXY:5EwoY5Ssb1n26E5AbbCWyIcYsY
type: MS-DOS executable, MZ for MS-DOS

Version Info:
Translation: 0x0409 0x04b0
InternalName: SmartTranslit 1.1
FileVersion: 1.01
CompanyName: Matyushchenko A.
Comments: http://www.ENTERcode.narod.ru
ProductName: SmartTranslit
ProductVersion: 1.01
OriginalFilename: SmartTranslit 1.1.exe

Trojan:Win32/Meredrop also known as:

nProtect	Trojan/W32.Agent.25744.C
CAT-QuickHeal	(Suspicious) – DNAScan
McAfee	Generic.dx
K7AntiVirus	Trojan-Downloader
K7GW	Trojan-Downloader
TheHacker	W32/Behav-Heuristic-060
Agnitum	Trojan.Agent!mcO97/kdJ94
F-Prot	W32/Heuristic-210!Eldorado
Symantec	Suspicious.MH690.A
Norman	Suspicious_U.gen
TrendMicro-HouseCall	Cryp_Xed-12
Avast	Win32:Trojan-gen
ViRobot	Packed.Win32.UPack
Sophos	Mal/Generic-S
Comodo	Backdoor.Win32.Popwin.~IT
VIPRE	Trojan.Win32.Packer.Upack0.3.9 (ep)
AntiVir	TR/Agent.25744.A
TrendMicro	Cryp_Xed-12
McAfee-GW-Edition	Heuristic.BehavesLike.Win32.Suspicious-BAY.G
Microsoft	Trojan:Win32/Meredrop
AhnLab-V3	Packed/Upack
GData	Win32.Trojan.Agent.DVT4D4
Commtouch	W32/Heuristic-210!Eldorado
PCTools	HeurEngine.MaliciousPacker
Rising	Trojan.Win32.Generic.12957FAA
Ikarus	Trojan-PWS.Win32.OnLineGames
Fortinet	W32/Malware_fam.NB
AVG	Generic24.BXQG
Panda	Trj/Pupack.A

How to remove Trojan:Win32/Meredrop?

Trojan:Win32/Meredrop removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X