Trojan

About “Trojan.Win32.Zudochka.ezl” infection

Malware Removal

The Trojan.Win32.Zudochka.ezl is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Zudochka.ezl virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Performs some HTTP requests
  • Looks up the external IP address
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
api.ipify.org
encorop.com

How to determine Trojan.Win32.Zudochka.ezl?


File Info:

crc32: FE17467C
md5: a00ca4bc48f2dde8786f05b50fdfde03
name: upload_file
sha1: 9073d67575714432f623928a47c4c7ae8997fa6b
sha256: 9f34fa05d64045ba9833a00884d71bbbbdf4702b4417c15fc35c6308ea918a08
sha512: de5814163bda7c754b1b69d1693e28809fa511230722f9ea70795f32ed6004d7fb392ef41ab08fadea759c3249c41c2503e3489f11d96ccca707a42658337631
ssdeep: 6144:fBQmQB4t1RdCGvYD0MUbR+RCt49zzw24lQhtnyqto6Dn0rLLz65KLN4XQKDt:pQmQMDXlbR+7w2FnyGo6Dn0ret
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Win32.Zudochka.ezl also known as:

MicroWorld-eScanTrojan.GenericKD.34738510
FireEyeGeneric.mg.a00ca4bc48f2dde8
CAT-QuickHealTrojan.Zudochka
ALYacTrojan.GenericKD.34738510
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
CrowdStrikewin/malicious_confidence_60% (W)
BitDefenderTrojan.GenericKD.34738510
K7GWTrojan ( 0001555e1 )
K7AntiVirusTrojan ( 0001555e1 )
InvinceaMal/Generic-S
CyrenW32/Trojan.IGPQ-7086
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan.Win32.Zudochka.ezl
AlibabaTrojan:Win32/Zudochka.83fe66e5
NANO-AntivirusTrojan.Win32.Zudochka.hzlbzx
TencentWin32.Trojan.Zudochka.Lhmq
Ad-AwareTrojan.GenericKD.34738510
EmsisoftTrojan.GenericKD.34738510 (B)
F-SecureTrojan.TR/Agent.svuxg
DrWebTrojan.PWS.Siggen2.57097
TrendMicroTrojan.Win32.WACATAC.USMANJB20
McAfee-GW-EditionBehavesLike.Win32.Injector.gh
SophosMal/Generic-S
IkarusTrojan.Win32.Agent
JiangminTrojan.Zudochka.hx
WebrootW32.Trojan.Gen
AviraTR/Agent.svuxg
eGambitUnsafe.AI_Score_88%
MAXmalware (ai score=82)
MicrosoftTrojan:Win32/Ymacco.AA9F
ArcabitTrojan.Generic.D212114E
AegisLabTrojan.Win32.Generic.4!c
ZoneAlarmTrojan.Win32.Zudochka.ezl
GDataTrojan.GenericKD.34738510
CynetMalicious (score: 85)
McAfeeGenericRXMF-QM!A00CA4BC48F2
VBA32suspected of Trojan.Downloader.gen.h
MalwarebytesTrojan.Agent
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Agent.UKB
TrendMicro-HouseCallTrojan.Win32.WACATAC.USMANJB20
RisingTrojan.Agent!8.B1E (TFE:5:K1205r2upoP)
MaxSecureTrojan.Malware.108396274.susgen
FortinetW32/Agent.UKB!tr
BitDefenderThetaGen:NN.ZexaF.34570.z4Z@aqysH5
AVGWin32:TrojanX-gen [Trj]
AvastWin32:TrojanX-gen [Trj]
Qihoo-360Win32/Trojan.fc8

How to remove Trojan.Win32.Zudochka.ezl?

Trojan.Win32.Zudochka.ezl removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment