Windows Defender detects and removes this threat.

This a generic detection for trojans that install and run malware on your PC. These trojans have been deliberately created in a complex way to hide their purpose and make them difficult to analyze.

Details for each Meredrop variant will vary and can include multiple components.

The malware installed by these trojans can can have any purpose, but they often connect to websites and download other malware.

Worm:Win32/Renocide.gen!A is a detection for a worm that exhibits backdoor behavior and attempts to download additional files from remote servers. It spreads via removable drives and network shares.

TrojanDownloader:Win32/Rugzip.A is a trojan that downloads other malware from predefined Web sites. Examples of malware downloaded by this trojan can include Trojan:Win32/Alureon.gen!J, TrojanDownloader:Win32/FakeRean, and Trojan:Win32/Meredrop.

TrojanDropper:Win32/Rooter.A is a generic detection for a trojan that may drop other malware. While the malware that it drops may vary from one instance to another, in the wild we have seen it dropping malware from several different families, including WinNT/Srizbi, Win32/Renos and Win32/Meredrop.

TrojanDropper:Win32/Muldrop.F is the detection for a self-extracting archive that bundles several malware samples together.

TrojanDropper:Win32/Alureon.V is a detection for malware that drops and launches other malware.

TrojanDropper:Win32/Stardrop.A is a trojan that drops other malware in the system.

TrojanDownloader:Win32/Chksyn is a trojan that attempts to download arbitrary files, which may possibly be other components. It may also drop other malware and disable the Windows Task Manager.

TrojanDownloader:Win32/VB.YBP is a trojan downloader that downloads and runs various malware in a system. It uses file names identical to those used by legitimate Windows files for its dropped copy and its downloaded malware.

TrojanDropper:MSIL/IRCFlood.A is a detection for a trojan that drops and installs other malware detected as Trojan:Win32/IRCFlood.I, .

Trojan:Win32/Dursg.E is a trojan that monitors Internet keyword searches to display pop-up advertisements. The trojan terminates security programs and attempts to download arbitrary files from predefined remote Web servers.

Windows Defender detects and removes this threat.

This family of hacktools are used to patch or "crack" some software so it will run without a valid license or genuine product key.

Don't run this hacktool as it can be associated with malware or unwanted software.

In the past, we have seen malware on many PCs where hacktools are detected. You can read more in Volume 13 of the Security Intelligence Report.