Trojan

Trojan.Win32.Zudochka.ewe removal

Malware Removal

The Trojan.Win32.Zudochka.ewe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Zudochka.ewe virus can do?

  • Attempts to connect to a dead IP:Port (2 unique times)
  • Performs some HTTP requests
  • Looks up the external IP address
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

api.ipify.org
tsrv3.ru

How to determine Trojan.Win32.Zudochka.ewe?


File Info:

crc32: 4433436F
md5: 5a7b84b8dea9212457299d86d6da2919
name: upload_file
sha1: 1860352a4a4af8ebcf4f9ba1ea0300fbc07538ac
sha256: 86995c6af264f6f9eeb381bbe0578ba59b3134a38b57345910bf958a222abf3b
sha512: 5a572bed41d5478dcc3061d5f09471603817b4d6d6d1fdfe872fd6eefbab9933657dd3370cba1eda7ef4db3d44f7067dd099f3e8bfd1d2de58053b861877ddf4
ssdeep: 6144:zPcLuS4KyDWQLhKYpEfkfLsmeJdUqP3ZXIcAz8bO05:TcLq9X2fYLsEyZXpnV
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Trojan.Win32.Zudochka.ewe also known as:

MicroWorld-eScanTrojan.GenericKD.43862731
ALYacTrojan.GenericKD.43862731
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 0052c9041 )
BitDefenderTrojan.GenericKD.43862731
K7GWTrojan ( 0052c9041 )
Cybereasonmalicious.a4a4af
TrendMicroTROJ_GEN.R002C0PIN20
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
KasperskyTrojan.Win32.Zudochka.ewe
AlibabaTrojan:Win32/Zudochka.1c38c194
ViRobotTrojan.Win32.Z.Agent.264718
AegisLabTrojan.Win32.Zudochka.4!c
RisingTrojan.Agent!8.B1E (TFE:5:K1205r2upoP)
Ad-AwareTrojan.GenericKD.43862731
EmsisoftTrojan.GenericKD.43862731 (B)
ComodoMalware@#2f3egjn3pz9le
F-SecureTrojan.TR/Agent.ytxen
DrWebTrojan.PWS.Siggen2.55607
InvinceaMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.Benjamin.dh
FireEyeGeneric.mg.5a7b84b8dea92124
SophosMal/Generic-S
IkarusTrojan.Win32.Agent
JiangminTrojan.Zudochka.hn
AviraTR/Agent.ytxen
eGambitUnsafe.AI_Score_98%
MAXmalware (ai score=85)
Antiy-AVLTrojan/Win32.Zudochka
MicrosoftTrojan:Win32/Ymacco.AA86
ArcabitTrojan.Generic.D29D4ACB
ZoneAlarmTrojan.Win32.Zudochka.ewe
GDataTrojan.GenericKD.43862731
CynetMalicious (score: 85)
McAfeeRDN/Generic.hbg
TACHYONTrojan/W32.Zudochka.264718
VBA32suspected of Trojan.Downloader.gen.h
MalwarebytesTrojan.Downloader
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Agent.UKB
TrendMicro-HouseCallTROJ_GEN.R002C0PIN20
TencentWin32.Trojan.Zudochka.Sxex
FortinetW32/Agent.UKB!tr
BitDefenderThetaGen:NN.ZexaF.34254.qGX@aqhVf6m
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_60% (W)
Qihoo-360Win32/Trojan.adf

How to remove Trojan.Win32.Zudochka.ewe?

Trojan.Win32.Zudochka.ewe removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment