Trojan-Downloader.Win32.Cridex.pef removal tips

The Trojan-Downloader.Win32.Cridex.pef is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Downloader.Win32.Cridex.pef virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan-Downloader.Win32.Cridex.pef?


File Info:
crc32: D3E00281
md5: 4e1930dd8db54b786ae84823814aa674
name: 4E1930DD8DB54B786AE84823814AA674.mlw
sha1: 9cc42679c68074145b0bcb346ee0ea31c9a486b7
sha256: 329262c5f8d1587355dddffe2fd6da7008cba56d83a89425dd7659b230332c38
sha512: 31f31da434df382992531fcfcb5937be3a21f41848c58540fa4f46c98db7e7426c16216cc94ed20ac25b67d91e5c277ec1bbc85ff4c308c0c067b72c49210363
ssdeep: 12288:tAJYfSBG7Iht4ojnVq1J3dZhVPTRAwAIuAONPK91X8U8tnx:tO07IAQnVqT3d/TvuhC1MU8b
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright 2006-2016 all authors (GPLv3)
FileVersion: 3.1.2
CompanyName: Krzysztof Kowalczyk
ProductName: SumatraPDF
ProductVersion: 3.1.2
FileDescription: SumatraPDF
OriginalFilename: SumatraPDF.exe
Translation: 0x0409 0x04e4

Trojan-Downloader.Win32.Cridex.pef also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Mint.Zamg.O
ALYac	Trojan.Mint.Zamg.O
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 0057329d1 )
BitDefender	Trojan.Mint.Zamg.O
K7GW	Trojan ( 0057329d1 )
CrowdStrike	win/malicious_confidence_80% (D)
Invincea	ML/PE-A + Troj/Agent-AJFK
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
ClamAV	Win.Packed.Razy-9777371-0
Kaspersky	HEUR:Trojan-Downloader.Win32.Cridex.pef
Ad-Aware	Trojan.Mint.Zamg.O
Sophos	Troj/Agent-AJFK
F-Secure	Heuristic.HEUR/AGEN.1139229
DrWeb	Trojan.Dridex.735
McAfee-GW-Edition	Drixed-FIY!4E1930DD8DB5
FireEye	Generic.mg.4e1930dd8db54b78
Emsisoft	Trojan.Mint.Zamg.O (B)
Ikarus	Win32.Outbreak
Jiangmin	TrojanDownloader.Cridex.zi
Avira	HEUR/AGEN.1139229
eGambit	Unsafe.AI_Score_98%
Microsoft	Trojan:Win32/Wacatac.D3!ml
Arcabit	Trojan.Mint.Zamg.O
ZoneAlarm	HEUR:Trojan-Downloader.Win32.Cridex.pef
GData	Trojan.Mint.Zamg.O
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.R354080
Acronis	suspicious
McAfee	Drixed-FIY!4E1930DD8DB5
MAX	malware (ai score=85)
VBA32	BScope.Trojan.Yakes
Malwarebytes	Trojan.Dridex
ESET-NOD32	a variant of Win32/Kryptik.HGRO
Rising	Malware.Obscure/Heur!1.A89E (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.101756618.susgen
Fortinet	W32/Kryptik.GLWT!tr
BitDefenderTheta	Gen:NN.ZexaF.34634.Fy0@a0uv7Gki
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.9c6807

How to remove Trojan-Downloader.Win32.Cridex.pef?

Trojan-Downloader.Win32.Cridex.pef removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X