Categories: Trojan

Trojan.Redosdru.1 removal instruction

The Trojan.Redosdru.1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Redosdru.1 virus can do?

Presents an Authenticode digital signature
Drops a binary and executes it
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup
Creates a copy of itself

Related domains:

z.whorecord.xyz

siriyun.top

a.tomx.xyz

How to determine Trojan.Redosdru.1?


File Info:
crc32: 48360CF6md5: acdba8c248d4d59a456200cc1701ecdename: X360.exesha1: c962704aded91cab909a58e04eca727019af89b4sha256: d8f4a313d71980d01993eddde31ba2960cdeeff6518e2933af1f98e28a80e183sha512: 9564079715029912b833ca1f33abba3c5e2bde7a6f12afb178db13d53634758a610b526bf19de03e770cb415ca6122f6c6c61d7507b7d294b267dbb194a60f37ssdeep: 6144:4f5d/x1C5P8LP+0TlawhEowGXziF1y7lC5Eo/j2Ia87WIOCqy3XE+BjONFaJMDtt:4f5d5EVE/lawhnB+F162ES2J8CrKEyjstype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: (C) Microsoft Corporation. All rights reserved.InternalName: Wextract                FileVersion: 6.00.2600.0000CompanyName: Microsoft CorporationProductName: Microsoft(R) Windows(R) Operating SystemProductVersion: 6.00.2600.0000FileDescription: Win32 Cabinet Self-Extractor                                           OriginalFilename: WEXTRACT.EXE            Translation: 0x0804 0x04b0

Trojan.Redosdru.1 also known as:

MicroWorld-eScan	Gen:Trojan.Redosdru.1
CAT-QuickHeal	Backdoor.Farfli.K4
McAfee	GenericR-KYK!ACDBA8C248D4
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 0055e3e41 )
BitDefender	Gen:Trojan.Redosdru.1
K7GW	Trojan ( 0055e3e41 )
Cybereason	malicious.248d4d
TrendMicro	BKDR_ZEGOST.SM26
Baidu	Win32.Trojan.Farfli.bd
Symantec	SMG.Heur!gen
Avast	Win32:Downloader-UAD [Trj]
ClamAV	Win.Virus.Gh0stRAT-6997801-0
GData	Gen:Trojan.Redosdru.1
Kaspersky	Backdoor.Win32.Farfli.dkh
Alibaba	Backdoor:Win32/Farfli.6c090bc2
NANO-Antivirus	Trojan.Win32.Farfli.cspudu
Tencent	Trojan.Win32.Lapka.bw
Endgame	malicious (high confidence)
Emsisoft	Gen:Trojan.Redosdru.1 (B)
F-Secure	Backdoor.BDS/Backdoor.Gen7
DrWeb	Trojan.KeyLogger.23629
Zillya	Backdoor.Farfli.Win32.642
McAfee-GW-Edition	GenericR-KYK!ACDBA8C248D4
FireEye	Generic.mg.acdba8c248d4d59a
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Farfli
Jiangmin	Backdoor.Farfli.akr
Avira	BDS/Backdoor.Gen7
Microsoft	Backdoor:Win32/Zegost.B
Arcabit	Trojan.Redosdru.1
ZoneAlarm	Backdoor.Win32.Farfli.dkh
AhnLab-V3	Backdoor/Win32.Farfli.C1930930
ALYac	Gen:Trojan.Redosdru.1
VBA32	BScope.Trojan.SvcHorse.01643
Malwarebytes	Backdoor.Bot
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/Farfli.AFJ
TrendMicro-HouseCall	BKDR_ZEGOST.SM26
Rising	Backdoor.Agent!1.BA06 (CLOUD)
Yandex	Trojan.Farfli!7C0qhPV5tsI
MAX	malware (ai score=81)
eGambit	Trojan.Generic
Fortinet	W32/Farfli.BAB!tr
Ad-Aware	Gen:Trojan.Redosdru.1
AVG	Win32:Downloader-UAD [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Backdoor.226