Trojan-Downloader.Win32.Cridex.gva removal tips

The Trojan-Downloader.Win32.Cridex.gva is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Downloader.Win32.Cridex.gva virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (2 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Performs some HTTP requests
Collects information about installed applications
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-Downloader.Win32.Cridex.gva?


File Info:
crc32: 2A6DB884
md5: 4fa396905538cf2975dda3aee5c466a4
name: upload_file
sha1: b2f19c153b41ad9969dbfd9ed0a0b46b1330a7ff
sha256: abc00bed0b42c8f67a598d1f858dd33e112ff04e0addfbf8f6f554a6b6eee54c
sha512: fe033ad226084599ec961a4f8342e386990457eb3c3ff21dd88f58c98762cf7e0cb1ccc2321a4afa61aaecb735e6f1922354a7a813167793a459ad63a1c2b666
ssdeep: 6144:1xI2j28bm2WJHEII+buAqQxZt4995XkN6y1Ya5PDlHPspG:eRJku/L05dyVrvn
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright 2007 by Don HO
InternalName: gup.exe
FileVersion: 4.1
CompanyName: Don HO don.h@free.fr
ProductName: GUP
ProductVersion: 4.1
FileDescription: GUP : a free (LGPL) Generic ipdater
OriginalFilename: gup.exe
Translation: 0x0409 0x04b0

Trojan-Downloader.Win32.Cridex.gva also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.44185682
FireEye	Generic.mg.4fa396905538cf29
CAT-QuickHeal	Trojandownloader.Cridex
McAfee	RDN/none
AegisLab	Trojan.Win32.Malicious.4!c
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.44185682
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (D)
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:DropperX-gen [Drp]
Kaspersky	Trojan-Downloader.Win32.Cridex.gva
Alibaba	TrojanDownloader:Win32/Cridex.4b97dbe0
ViRobot	Trojan.Win32.Z.Shade.397824
Rising	Trojan.Generic@ML.99 (RDML:m76DKqv5Y4f1JOzeQyaNSw)
Ad-Aware	Trojan.GenericKD.44185682
Comodo	Malware@#1hwngui47p3cl
MaxSecure	Trojan.Malware.108997572.susgen
DrWeb	Trojan.Dridex.735
VIPRE	Trojan.Win32.Generic!BT
Invincea	Mal/Generic-S
McAfee-GW-Edition	RDN/none
Sophos	Mal/Generic-S
SentinelOne	DFI – Malicious PE
Webroot	W32.Trojan.Dridex
Avira	TR/AD.Dridex.wqrhu
MAX	malware (ai score=84)
Microsoft	Trojan:Win32/Ymacco.AAAB
Arcabit	Trojan.Generic.D2A23852
ZoneAlarm	Trojan-Downloader.Win32.Cridex.gva
GData	Trojan.GenericKD.44185682
VBA32	BScope.TrojanRansom.Shade
ALYac	Trojan.GenericKD.34863700
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Kryptik.HGZC
Tencent	Win32.Trojan-downloader.Cridex.Phgt
Ikarus	Trojan.SuspectCRC
Fortinet	W32/Cridex.GVA!tr.dldr
BitDefenderTheta	Gen:NN.ZedlaF.34590.yu8@a8DCpAji
AVG	Win32:DropperX-gen [Drp]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Downloader.ddd

How to remove Trojan-Downloader.Win32.Cridex.gva?

Trojan-Downloader.Win32.Cridex.gva removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan-Downloader.Win32.Cridex.gva removal tips