How to remove "Trojan-Banker.Win32.Cridex.qux"?

The Trojan-Banker.Win32.Cridex.qux is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Banker.Win32.Cridex.qux virus can do?

Executable code extraction
Creates RWX memory
Attempts to connect to a dead IP:Port (6 unique times)
At least one IP Address, Domain, or File Name was found in a crypto call
Attempts to create or modify system certificates
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

support.apple.com

loadofficer.casa

help.twitter.com

www.intel.com

support.oracle.com

How to determine Trojan-Banker.Win32.Cridex.qux?


File Info:
crc32: 08879A00
md5: b0f74b47997f07b2d740c27d72f9e2a8
name: upload_file
sha1: 18a8e564c6284351721d1c6f1b89d4435c4875b1
sha256: 5251393cd54a8a1b7e73a61c60c861187fbbd6d708025bcb99bbe7103fd303d4
sha512: 453faf5efc2cd1e0f4a4c6a09be61f4b071a326a279f0a75bf648b21bf0295ebcba5d0d9810908303427c058a131ffc2e090d5401f0b2b5c2760fb9f261ae5bb
ssdeep: 3072:hjQM9Q+UlKtdHj+/B+B+LkLJc6HjtyNpYX:lS+Ua1fHjCYX
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 2012 Jama Software Ran Corporation. All rights reserved.
InternalName: office.dll
FileVersion: 1.6.5.205
CompanyName: Jama Software Ran
ProductName: Jama Software Ran Againstsuffix
ProductVersion: 1.6.5.205
Way: Question
FileDescription: Againstsuffix
OriginalFilename: office.dll
Translation: 0x0409 0x04b0

Trojan-Banker.Win32.Cridex.qux also known as:

MicroWorld-eScan	Trojan.GenericKD.43681651
FireEye	Generic.mg.b0f74b47997f07b2
CAT-QuickHeal	Trojan.Cridex
McAfee	RDN/PWS-Banker
Cylance	Unsafe
Sangfor	Malware
Alibaba	TrojanBanker:Win32/Cridex.0b17cf33
K7GW	Trojan ( 0056cb401 )
K7AntiVirus	Trojan ( 0056cb401 )
TrendMicro	TROJ_GEN.R032C0DHI20
Cyren	W32/Trojan.EXTG-4253
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	Trojan-Banker.Win32.Cridex.qux
BitDefender	Trojan.GenericKD.43681651
NANO-Antivirus	Trojan.Win32.Cridex.hslpnp
Rising	Trojan.Kryptik!1.CAD4 (CLASSIC)
Ad-Aware	Trojan.GenericKD.43681651
Comodo	TrojWare.Win32.Genome.ewxgs@0
F-Secure	Trojan.TR/Kryptik.vpmpx
DrWeb	Trojan.IcedID.30
VIPRE	Trojan.Win32.Generic!BT
Sophos	Mal/Generic-S
Paloalto	generic.ml
Webroot	W32.Trojan.Valak
Avira	TR/Kryptik.vpmpx
Antiy-AVL	Trojan[Banker]/Win32.Cridex
Microsoft	Trojan:Win32/IcedId.DA!MTB
ViRobot	Trojan.Win32.Z.Icedid.134146.A
ZoneAlarm	Trojan-Banker.Win32.Cridex.qux
GData	Trojan.GenericKD.43681651
Cynet	Malicious (score: 85)
BitDefenderTheta	Gen:NN.ZedlaF.34196.iu9@aC1je8ki
ALYac	Trojan.IcedID.gen
MAX	malware (ai score=83)
VBA32	TrojanBanker.Cridex
Malwarebytes	Trojan.IcedID
ESET-NOD32	a variant of Win32/GenKryptik.EQOO
TrendMicro-HouseCall	TROJ_GEN.R032C0DHI20
Tencent	Malware.Win32.Gencirc.11acc0e4
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_75%
Fortinet	W32/GenKryptik.EQOO!tr
AVG	Win32:Trojan-gen
Panda	Trj/GdSda.A
Qihoo-360	Win32/Trojan.a78

How to remove Trojan-Banker.Win32.Cridex.qux?

Trojan-Banker.Win32.Cridex.qux removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Trojan-Banker.Win32.Cridex.qux”?