Trojan.Agent.EYDC removal guide

The Trojan.Agent.EYDC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.EYDC virus can do?

Executable code extraction
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
A process created a hidden window
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Creates a copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Agent.EYDC?


File Info:
crc32: AE0902C6
md5: 3c89b64f8eda4afe69e11a85dab8401e
name: kv.gif
sha1: 3df294805d8f0dcf9a6181bfb756cd89bb47cb8c
sha256: 0a28fad79f2139aee4ef49a04f041ecd8badcf34a00072a9efbceb0a42a71eff
sha512: 19b80419cc5f6e3d22b571f60fbc096c2fc984c6a98e4e7807ed14a77e12e37ccfe36a9d5b8ff103a58ef950722ef901e190d2bb8bf4d65185f58fa141f87893
ssdeep: 6144:TdtJ9rtpMBa7CSqNF2+Nlu/of4jHwr68M:Td1rMBgCSqY+Nloof4Hw2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 Headlight Software, Inc.  All rights reserved.
InternalName: AdminPrivSetting.exe
FileVersion: 1.0.6.5
CompanyName: Headlight Software, Inc.
ProductName: (Shared by Headlight Software Products)
ProductVersion: 1.0.6.5
FileDescription: Change Settings that need Admin Privileges
OriginalFilename: AdminPrivSetting.exe
Translation: 0x0409 0x04e4

Trojan.Agent.EYDC also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Agent.EYDC
FireEye	Generic.mg.3c89b64f8eda4afe
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Spyware ( 0040f0131 )
BitDefender	Trojan.Agent.EYDC
K7GW	Spyware ( 0040f0131 )
CrowdStrike	win/malicious_confidence_100% (D)
Symantec	Packed.Generic.459
APEX	Malicious
Ad-Aware	Trojan.Agent.EYDC
DrWeb	Trojan.Inject4.3925
Invincea	ML/PE-A
Avira	TR/Dropper.Gen
eGambit	Unsafe.AI_Score_99%
MAX	malware (ai score=80)
Microsoft	Trojan:Win32/Wacatac.C!ml
SUPERAntiSpyware	Trojan.Agent/Generic
Acronis	suspicious
VBA32	BScope.Malware-Cryptor.Hlux
ESET-NOD32	a variant of Win32/Kryptik.HGZZ
Rising	Trojan.Generic@ML.87 (RDML:KBwKRGMwK3ydUr6xCrpvLQ)
SentinelOne	DFI – Malicious PE
BitDefenderTheta	Gen:NN.ZexaF.34590.py0@a0uWZzki

How to remove Trojan.Agent.EYDC?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Agent.EYDC removal guide