Trojan-Downloader.Win32.Cridex.hba malicious file

The Trojan-Downloader.Win32.Cridex.hba is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Downloader.Win32.Cridex.hba virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (2 unique times)
Creates RWX memory
Performs some HTTP requests
Collects information about installed applications
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-Downloader.Win32.Cridex.hba?


File Info:
crc32: F03E56B6
md5: c06737aee66dcd72a8b24cb6c4cee3ef
name: C06737AEE66DCD72A8B24CB6C4CEE3EF.mlw
sha1: 19140ee433e594146643f9a7259abb8120c41b8b
sha256: f2e354c9a4a21528e843122e38ed656d665a5e32141e26a1d60602a382d44912
sha512: 10a47a781e665b1474a5ab3a99cc61658dc10cb9b1f958094fa1fd062d0ed6d0c94baab0fb0219045f9a72e18ba49253eadbc7462c3feb8da6f8d0d5692ad8cb
ssdeep: 6144:lkF19P2yLnafTR93YBgobwN+5AxtyTCjzVm8Ntk8IgJ0gy:lkFne883YdbY+5QyTE1tktyd
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: Mcx2Prov.exe
FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7601.17514
FileDescription: MCX2 Provisioning library
OriginalFilename: Mcx2Prov.exe
Translation: 0x0409 0x04b0

Trojan-Downloader.Win32.Cridex.hba also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.35294279
FireEye	Generic.mg.c06737aee66dcd72
Qihoo-360	Win32/Trojan.Downloader.305
ALYac	Trojan.GenericKD.35294279
Malwarebytes	Trojan.Dridex
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Trojan.GenericKD.35294279
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
BitDefenderTheta	Gen:NN.ZedlaF.34634.Hy8@aSqEP1di
Cyren	W32/Trojan.TZUN-1859
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan-Downloader.Win32.Cridex.hba
Alibaba	TrojanDownloader:Win32/Cridex.a105fea7
AegisLab	Trojan.Win32.Cridex.a!c
Tencent	Win32.Trojan-downloader.Cridex.Svqt
Ad-Aware	Trojan.GenericKD.35294279
Emsisoft	Trojan.Crypt (A)
F-Secure	Trojan.TR/AD.Dridex.xbpua
DrWeb	Trojan.Dridex.735
TrendMicro	TROJ_GEN.R011C0DKM20
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-R + Mal/EncPk-APV
Ikarus	Trojan.Dridex
Avira	TR/AD.Dridex.xbpua
Antiy-AVL	GrayWare/Win32.Kryptik.ehls
Microsoft	Trojan:Win32/Ursnif.DL!MTB
Gridinsoft	Trojan.Win32.Downloader.oa
ZoneAlarm	Trojan-Downloader.Win32.Cridex.hba
GData	Trojan.GenericKD.35294279
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C4228830
McAfee	GenericRXMQ-WR!C06737AEE66D
MAX	malware (ai score=100)
VBA32	Trojan.Wacatac
Cylance	Unsafe
ESET-NOD32	a variant of Win32/Kryptik.HHQO
TrendMicro-HouseCall	TROJ_GEN.R011C0DKM20
Rising	Ransom.Shade!8.12CC (TFE:2:k40YZbWyNNL)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Cridex.HBA!tr.dldr
AVG	Win32:MalwareX-gen [Trj]
Panda	Trj/GdSda.A

How to remove Trojan-Downloader.Win32.Cridex.hba?

Trojan-Downloader.Win32.Cridex.hba removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan-Downloader.Win32.Cridex.hba malicious file