Trojandownloader.Cridex removal guide

The Trojandownloader.Cridex is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojandownloader.Cridex virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (2 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Performs some HTTP requests
Collects information about installed applications
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojandownloader.Cridex?


File Info:
crc32: D9A245C9
md5: c430c3f7ea936f4d4b40ca887d45bac2
name: C430C3F7EA936F4D4B40CA887D45BAC2.mlw
sha1: 2f01bbdbeddbe0f7a720b27d94dccf5f20dd5d32
sha256: 9789e808a4b2da31b349f133baafbfd9e05fc78b598915bb46c492c8aeef317f
sha512: f47af534380029ec96a49ebef698029e755c22140b9c6539c1ca2ce11ee539481fac03983cd6cb0a86606fd601c64ff536f7a5799e06d5441c7eff00cdd8222e
ssdeep: 6144:pLExaqvRuqh931pIwuZ0/GBzqiH859y1gH67QTy6zmBIUm/acyB0cht0dr3xyFS:pLE0fqhtc05I1h6yi2IUHh/to3Wp
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Children cow Corporation. All rights reserved
InternalName: Hunt effect
FileVersion: 7.4.2.656
CompanyName: Children cow Corporation
ProductName: Children cowxae Free racexae
Heat: 753700
ProductVersion: 7.4.2.656
FileDescription: Children cow Free race
OriginalFilename: after.dll Oceantogether
Translation: 0x0409 0x04b0

Trojandownloader.Cridex also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.45817489
FireEye	Generic.mg.c430c3f7ea936f4d
CAT-QuickHeal	Trojandownloader.Cridex
ALYac	Trojan.GenericKD.45817489
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Dridex.NQ
K7AntiVirus	Trojan ( 005789a61 )
BitDefender	Trojan.GenericKD.45817489
K7GW	Trojan ( 005789a61 )
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/Kryptik.DMM.gen!Eldorado
Avast	Win32:CrypterX-gen [Trj]
Kaspersky	HEUR:Trojan-Downloader.Win32.Cridex.gen
AegisLab	Trojan.Win32.Cridex.a!c
Ad-Aware	Trojan.GenericKD.45817489
Emsisoft	Trojan.Crypt (A)
Comodo	Malware@#24iq68svxdkh9
MaxSecure	Trojan.Malware.74221143.susgen
DrWeb	Trojan.Dridex.735
TrendMicro	Trojan.Win32.MALREP.THCOBBA
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Crypt
Webroot	W32.Trojan.Gen
MAX	malware (ai score=87)
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Dridex.NQ!MTB
Gridinsoft	Trojan.Win32.Downloader.oa
Arcabit	Trojan.Generic.D2BB1E91
ZoneAlarm	HEUR:Trojan-Downloader.Win32.Cridex.gen
GData	Trojan.GenericKD.45817489
Cynet	Malicious (score: 90)
AhnLab-V3	Trojan/Win32.Generic.C4357065
McAfee	GenericRXNU-ND!C430C3F7EA93
VBA32	TrojanDownloader.Cridex
Malwarebytes	Trojan.Dridex
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Kryptik.HJSK
TrendMicro-HouseCall	Trojan.Win32.MALREP.THCOBBA
Rising	Downloader.Cridex!8.F70 (C64:YzY0Onwh1iGRzYOL)
Fortinet	PossibleThreat.MU
AVG	Win32:CrypterX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Dridex.HgkASQAA

How to remove Trojandownloader.Cridex?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojandownloader.Cridex removal guide