Should I remove "Trojan.Agent.EYDC (B)"?

The Trojan.Agent.EYDC (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.EYDC (B) virus can do?

Executable code extraction
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
A process created a hidden window
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Creates a copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Agent.EYDC (B)?


File Info:
crc32: 22C2ECAA
md5: 5239eb77fb1df8b52203826d61fffa05
name: kv.gif
sha1: bd741c998bfe161d225ab2557606e341ecd5193b
sha256: 929e31649a662ccb0519ced35e737ed5b6c686ad68a43ca9af163b61428cefc1
sha512: a5e221ca3ebe6e20e24684e1da9735e7f4aab2a2f0081e6ddd5f0263692ca0dbae1a43604a17ed129a891035abb5514bc62d2b880318d24ad9d61ada197950a7
ssdeep: 6144:TdtJ9rtpMBa7CSqNF2+Nlu/of4jHwr68M:Td1rMBgCSqY+Nloof4Hw2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 Headlight Software, Inc.  All rights reserved.
InternalName: AdminPrivSetting.exe
FileVersion: 1.0.6.5
CompanyName: Headlight Software, Inc.
ProductName: (Shared by Headlight Software Products)
ProductVersion: 1.0.6.5
FileDescription: Change Settings that need Admin Privileges
OriginalFilename: AdminPrivSetting.exe
Translation: 0x0409 0x04e4

Trojan.Agent.EYDC (B) also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
FireEye	Generic.mg.5239eb77fb1df8b5
McAfee	GenericRXAA-AA!5239EB77FB1D
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Spyware ( 0040f0131 )
K7GW	Spyware ( 0040f0131 )
Cybereason	malicious.98bfe1
Invincea	ML/PE-A
Symantec	Packed.Generic.459
APEX	Malicious
Kaspersky	UDS:DangerousObject.Multi.Generic
Rising	Trojan.Generic@ML.87 (RDML:KBwKRGMwK3ydUr6xCrpvLQ)
F-Secure	Trojan.TR/Dropper.Gen
McAfee-GW-Edition	BehavesLike.Win32.Trojan.dc
Emsisoft	Trojan.Agent.EYDC (B)
Avira	TR/Dropper.Gen
Antiy-AVL	GrayWare/Win32.Kryptik.ehls
Microsoft	Trojan:Win32/Wacatac.C!ml
SUPERAntiSpyware	Trojan.Agent/Generic
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Cynet	Malicious (score: 100)
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.34590.py0@a0uWZzki
VBA32	BScope.Malware-Cryptor.Hlux
ESET-NOD32	a variant of Win32/Kryptik.HGZZ
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Trojan.Agent.EYDC (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Trojan.Agent.EYDC (B)”?