Trojan.Agent.ETDD malicious file

The Trojan.Agent.ETDD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.ETDD virus can do?

Executable code extraction
Creates RWX memory
Attempts to repeatedly call a single API many times in order to delay analysis time
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Agent.ETDD?


File Info:
crc32: B0866C8D
md5: 29384c2de7bfc431ba9cb86192e79cbc
name: cursor.png
sha1: 2d16f421298efac34d8711912d2732ba3318671a
sha256: 56d477f0fb40f426c7697c92bf27f96ae13df99318f3b5f5b55d45deb196179b
sha512: c19dbaf80571cf085719a475d6a3ca3518cb248da393dce859d60bb9c16a8910db930554b2fc5ca2faead22743f81b79b7b195a52b11f8d1b70c606c21aa4a2f
ssdeep: 3072:uGkSYvxWFdFE/fS8sY6PguLVJfI8h6tXKBE/fzgmP3uZ3qGNRpAS9iHJz7v9UNeQ:U/xWFdFY6IiVRBhoRzg0Z6AZbts1b
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: StringExtractor
FileVersion: 1.0.0.0
CompanyName: Gdr Ltd.
Comments: Votes and Comments are highly appreciated
ProductName: StringExtractor
ProductVersion: 1.0.0.0
FileDescription: StringExtractor - Extracts Strings from binary Files
OriginalFilename: StringExtractor.exe

Trojan.Agent.ETDD also known as:

Bkav	W32.AIDetectVM.malware1
MicroWorld-eScan	Trojan.Agent.ETDD
FireEye	Generic.mg.29384c2de7bfc431
McAfee	GenericRXAA-AA!29384C2DE7BF
Cylance	Unsafe
Sangfor	Malware
BitDefender	Trojan.Agent.ETDD
Cybereason	malicious.1298ef
BitDefenderTheta	Gen:NN.ZevbaF.34130.Em1@a4JWk9gO
ESET-NOD32	a variant of Win32/GenKryptik.ENER
Avast	Win32:Trojan-gen
GData	Trojan.Agent.ETDD
Kaspersky	Trojan.Win32.Vebzenpak.xfv
Rising	Trojan.Injector!1.C714 (C64:YzY0OoriE/cUdnuI)
Endgame	malicious (high confidence)
TACHYON	Trojan/W32.VB-Vebzenpak.491577
Emsisoft	Trojan.Agent.ETDD (B)
DrWeb	Trojan.DownLoader33.58091
Invincea	heuristic
APEX	Malicious
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Win32.Vebzenpak
ZoneAlarm	Trojan.Win32.Vebzenpak.xfv
Cynet	Malicious (score: 100)
MAX	malware (ai score=85)
Malwarebytes	Trojan.Injector
Panda	Trj/GdSda.A
SentinelOne	DFI – Suspicious PE
Fortinet	W32/GenKryptik.ENER!tr
Ad-Aware	Trojan.Agent.ETDD
AVG	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Trojan.Agent.ETDD?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Agent.ETDD malicious file