Categories: Trojan

Trojan.Redosdru malicious file

The Trojan.Redosdru is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Redosdru virus can do?

Creates RWX memory
Dynamic (imported) function loading detected
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.Redosdru?


File Info:
name: BFCFAA20850E9891B543.mlwpath: /opt/CAPEv2/storage/binaries/02df20704791ed523be1e86d079200415c852094f4ead176e8c51bf968f04fb0crc32: 18EEC29Cmd5: bfcfaa20850e9891b5439e5fc6699ff1sha1: 495abe24d244b829650bf2c63ad4ac0c203b562bsha256: 02df20704791ed523be1e86d079200415c852094f4ead176e8c51bf968f04fb0sha512: e50c946129e7dc39bbf85ba9fe0b2ffe7bff540ead25c21c72b71898859ec02bdd4f7fff559c3b9baf9cae8b149a2fed4d9608e052e2b503a390db2862888288ssdeep: 24576:kthyLwtOMYxUZq1BCX7sE068zE1/NbRINd/jiCHJmiLRCYzPN/nm8VysAls5xPEA:kthSB68zAxcfUiLRTAZvZqIzfZytype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1CD958E62B7915476C02316785D3B57A9A939BF002F38A9C77BF06E4C6E363C07939293sha3_384: ed8211acc265128469a86613066e5d81fc9027333262b20388fe24e8cde6879687ec5db31911e03de9034dc392cf6f9cep_bytes: 558bec83c4f053b838a04800e8ffb8f7timestamp: 2011-06-27 08:23:03
Version Info:
0: [No Data]

Trojan.Redosdru also known as:

Elastic	malicious (high confidence)
DrWeb	BackDoor.Bifrost.15005
McAfee	Artemis!BFCFAA20850E
Cylance	Unsafe
Sangfor	Suspicious.Win32.Evo.atgen
Alibaba	AdWare:Win32/DRMSoft.00ac6403
K7GW	Trojan ( 004b94301 )
K7AntiVirus	Trojan ( 004b94301 )
Cyren	W32/Trojan.DD.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.DRMSoft.B suspicious
TrendMicro-HouseCall	TROJ_GEN.R002H0CKD21
Paloalto	generic.ml
ClamAV	Win.Trojan.Bifrose-17928
Kaspersky	UDS:DangerousObject.Multi.Generic
NANO-Antivirus	Trojan.Win32.Bifrost.dnmhjg
Avast	Win32:Malware-gen
Comodo	Malware@#1a8msnh4p37oz
McAfee-GW-Edition	BehavesLike.Win32.PUP.th
Sophos	Generic PUA EJ (PUA)
SentinelOne	Static AI – Suspicious PE
Jiangmin	AdWare.Generic.ezee
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Adware/Win32.Agent.C2393728
VBA32	Trojan.Redosdru
Malwarebytes	Generic.Trojan.Banker.DDS
APEX	Malicious
Yandex	Trojan.GenAsa!Unqd7e7rMuk
Ikarus	PUA.DRMSoft
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Malware-gen
Cybereason	malicious.4d244b