Trojan

About “Trojan.Eb” infection

Malware Removal

The Trojan.Eb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Eb virus can do?

  • Attempts to connect to a dead IP:Port (1170 unique times)
  • A process created a hidden window
  • Drops a binary and executes it
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Eb?


File Info:

crc32: 166ADDAF
md5: 01a9b1f9a9db526a54a64e39a605dd30
name: c.dat
sha1: a436e3f5a9ee5e88671823b43fa77ed871c1475b
sha256: 9a1365c42f4aca3e9c1c5dcf38b967b73ab56e4af0b4a4380af7e2bf185478bc
sha512: 5e9bb40b47c3a1a036ede25b3d1b7bbb4da2f048145fa1f3aaeccca11df88c108429b5bb859ab6da888c9e8ee6da2b1040d7341426e5776dbf5c3fa8ab9dd90f
ssdeep: 49152:HukzsCYr5TZNnFiL/FUEA0x2YBp4j8VThthc48Lezv:Ok4CwJsL/HAFYBp4jMM48Le
type: MS-DOS executable, MZ for MS-DOS

Version Info:

0: [No Data]

Trojan.Eb also known as:

BkavW32.AIDetectVM.malware
MicroWorld-eScanDropped:Trojan.GenericKD.32937697
FireEyeGeneric.mg.01a9b1f9a9db526a
CAT-QuickHealTrojan.Agent
ALYacTrojan.Ransom.Satan
CylanceUnsafe
AegisLabTrojan.Win32.Eb.4!c
SangforMalware
K7AntiVirusTrojan ( 004f40381 )
BitDefenderDropped:Trojan.GenericKD.32937697
K7GWTrojan ( 004f40381 )
Cybereasonmalicious.5a9ee5
TrendMicroTROJ_GEN.R002C0WAD20
BitDefenderThetaGen:NN.ZexaF.34082.koqaaevOgYoi
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win64/Riskware.Mimikatz.B
TrendMicro-HouseCallTROJ_GEN.R002C0WAD20
AvastWin32:Malware-gen
GDataDropped:Trojan.GenericKD.32937697
KasperskyTrojan.Win32.Eb.acs
AlibabaTrojan:Win32/Mimikatz.f53cba30
APEXMalicious
RisingTrojan.Eb!8.10DCC (CLOUD)
Ad-AwareDropped:Trojan.GenericKD.32937697
SophosMal/Generic-S
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebBackDoor.Siggen2.2089
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.VTFlooder.vc
CMCVirus.Win32.Sality!O
EmsisoftDropped:Trojan.GenericKD.32937697 (B)
SentinelOneDFI – Malicious PE
CyrenW32/Trojan.CHUK-0891
JiangminTrojan.Crypmod.vn
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=85)
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D1F696E1
ZoneAlarmTrojan.Win32.Eb.acs
MicrosoftTrojan:Win32/Wacatac.D!ml
Acronissuspicious
McAfeeArtemis!01A9B1F9A9DB
VBA32Trojan.Eb
MalwarebytesTrojan.MalPack.MPRESS
PandaTrj/CI.A
TencentWin32.Trojan.Eb.Eer
FortinetRiskware/Mimikatz
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Trojan.113

How to remove Trojan.Eb?

Trojan.Eb removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment