Categories: Trojan

Trojan.AgentWDCR.ERJ malicious file

The Trojan.AgentWDCR.ERJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.AgentWDCR.ERJ virus can do?

Creates RWX memory
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.AgentWDCR.ERJ?


File Info:
crc32: 357CC540md5: 97321314b968cd4153500a5ea60b18a7name: 97321314B968CD4153500A5EA60B18A7.mlwsha1: 52756ba337473ebd5ea1b920f5dbe59cc810b14asha256: 940be608c51ce9719a9708a7691b21dc92af7605d9943f290c9e7d78776054e8sha512: bf244c2d1e7d555741b1b28f1b12f55bb7f3dc269f5e193a5e3c641812344e1b1f34edf3846a7599a9e2ecfb3fe0bc7f0dfc0ee17b861162558d03c57a4b5afdssdeep: 1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZjjLJkJ/BB+:c8y93KQjy7G55riF1cMo03tjL8BUtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: (C) Microsoft Corporation. All rights reserved.InternalName: LanguagePackFileVersion: 5, 1, 2600, 5512CompanyName: Microsoft CorporationPrivateBuild: LegalTrademarks: Comments: ProductName: Microsoft(C) Windows(C) Operating SystemSpecialBuild: ProductVersion: 5, 1, 2600, 5512FileDescription: LanguagePackOriginalFilename: LanguagePackTranslation: 0x0409 0x04b0

Trojan.AgentWDCR.ERJ also known as:

Bkav	W32.DakusarDRAX.Trojan
TotalDefense	Win32/Flofix.D
MicroWorld-eScan	Trojan.AgentWDCR.ERJ
ALYac	Trojan.AgentWDCR.ERJ
Cylance	Unsafe
Sangfor	Malware
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Trojan:Win32/Floxif.1efa9020
K7GW	Trojan ( 001a5abb1 )
K7AntiVirus	Trojan ( 001a5abb1 )
TrendMicro	TROJ_FLOXIF_EK040354.UVPM
Cyren	W32/Fixflo.A.gen!Eldorado
ESET-NOD32	Win32/Floxif.E
APEX	Malicious
Avast	Win32:FloxLib-A [Trj]
ClamAV	Win.Malware.Pioneer-6803950-0
GData	Trojan.AgentWDCR.ERJ
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.AgentWDCR.ERJ
NANO-Antivirus	Trojan.Win32.Floxif.cqjmcu
ViRobot	Trojan.Win32.Agent.176128.DD[UPX]
SUPERAntiSpyware	Trojan.Agent/Gen-MSFake
Ad-Aware	Trojan.AgentWDCR.ERJ
Sophos	Mal/Behav-160
Comodo	TrojWare.Win32.Floxif.E@81235b
F-Secure	Malware.W32/AD.Floxif.B
BitDefenderTheta	AI:Packer.E2E9546B1C
Zillya	Trojan.Floxif.Win32.2
Invincea	heuristic
Emsisoft	Trojan.AgentWDCR.ERJ (B)
F-Prot	W32/Fixflo.A.gen!Eldorado
Endgame	malicious (moderate confidence)
Webroot	W32.Trojan.Gen
Avira	W32/AD.Floxif.B
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Win32.AGeneric
Jiangmin	Trojan/Generic.bijcu
Arcabit	Trojan.AgentWDCR.ERJ
AegisLab	Trojan.Win32.Generic.lEcK
ZoneAlarm	HEUR:Trojan.Win32.Generic
AhnLab-V3	Virus/Win32.Fixflo.R204310
Acronis	suspicious
VBA32	Trojan.Sly
MAX	malware (ai score=83)
TrendMicro-HouseCall	TROJ_FLOXIF_EK040354.UVPM
Tencent	Malware.Win32.Gencirc.10b8b16d
Yandex	TrojanSpy.Agent!odMUtMunyS8
SentinelOne	DFI – Malicious PE
MaxSecure	Worm.Win32.Floxi.F
Fortinet	W32/Floxif.E
AVG	Win32:FloxLib-A [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/VirusOrg.Symsvr.A