Trojan

How to remove “Trojan.Agent.Zudochka”?

Malware Removal

The Trojan.Agent.Zudochka is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.Zudochka virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Performs some HTTP requests
  • Looks up the external IP address
  • Steals private information from local Internet browsers
  • Collects information about installed applications
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Attempts to access Bitcoin/ALTCoin wallets
  • Harvests information related to installed instant messenger clients
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

api.ipify.org
sweyblidian.com

How to determine Trojan.Agent.Zudochka?


File Info:

crc32: 7FC11B0F
md5: 77be0dd6570301acac3634801676b5d7
name: 77BE0DD6570301ACAC3634801676B5D7.mlw
sha1: 7394632d8cfc00c35570d219e49de63076294b6b
sha256: 94e60de577c84625da69f785ffe7e24c889bfa6923dc7b017c21e8a313e4e8e1
sha512: 4ca6db741c01f32f168c0d496494f8f46402885922074c010cd3085f8271bd374f5a3b07ec0717eb6fa9fe11f9c74de6d22a75690359381d08ecb6853150d07c
ssdeep: 6144:VMWdTMYHqhElscw4liVM1LDtG8esyh3hNn+:TdTJqWrEVcDYxN+
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Trojan.Agent.Zudochka also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.45628116
FireEyeGeneric.mg.77be0dd6570301ac
CAT-QuickHealTrojan.Zudochka
ALYacTrojan.Agent.Zudochka
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Zudochka.4!c
SangforMalware
K7AntiVirusTrojan ( 0001555e1 )
BitDefenderTrojan.GenericKD.45628116
K7GWTrojan ( 0001555e1 )
Cybereasonmalicious.657030
BitDefenderThetaGen:NN.ZexaF.34780.qGX@amUves
CyrenW32/Trojan.PEUM-7292
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Agent.UKB
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
ClamAVWin.Trojan.FickerStealer-9805476-1
KasperskyHEUR:Trojan.Win32.Zudochka.vho
AlibabaTrojanDownloader:Win32/Stealer.64937511
ViRobotTrojan.Win32.Z.Zudochka.273422.A
TencentWin32.Trojan.Zudochka.Ajmc
Ad-AwareTrojan.GenericKD.45628116
SophosMal/Generic-S
F-SecureTrojan.TR/Agent.aypeq
DrWebTrojan.PWS.Siggen2.61317
ZillyaTrojan.Agent.Win32.1690805
TrendMicroTROJ_GEN.R002C0DAK21
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
EmsisoftTrojan.Agent (A)
IkarusTrojan.Win32.Agent
JiangminTrojan.Zudochka.kd
AviraTR/Agent.aypeq
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojanDownloader:Win32/Stealer.CK!MTB
ArcabitTrojan.Generic.D2B83AD4
AhnLab-V3Malware/Win32.RL_Generic.R352614
ZoneAlarmHEUR:Trojan.Win32.Zudochka.vho
GDataTrojan.GenericKD.45628116
CynetMalicious (score: 100)
McAfeeRDN/Generic Downloader.x
MAXmalware (ai score=88)
VBA32BScope.Trojan.Zudochka
MalwarebytesSpyware.FickerStealer
PandaTrj/GdSda.A
TrendMicro-HouseCallTrojanSpy.Win32.FICKERSTEALER.SMTH.hp
RisingTrojan.Agent!8.B1E (TFE:5:FdJXowScMLN)
eGambitUnsafe.AI_Score_98%
FortinetW32/Agent.UKB!tr
WebrootW32.Trojan.Gen
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Trojan.22e

How to remove Trojan.Agent.Zudochka?

Trojan.Agent.Zudochka removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment