Categories: Trojan

Trojandownloader.Cridex removal guide

The Trojandownloader.Cridex is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojandownloader.Cridex virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (2 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Performs some HTTP requests
Collects information about installed applications
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojandownloader.Cridex?


File Info:
crc32: D9A245C9md5: c430c3f7ea936f4d4b40ca887d45bac2name: C430C3F7EA936F4D4B40CA887D45BAC2.mlwsha1: 2f01bbdbeddbe0f7a720b27d94dccf5f20dd5d32sha256: 9789e808a4b2da31b349f133baafbfd9e05fc78b598915bb46c492c8aeef317fsha512: f47af534380029ec96a49ebef698029e755c22140b9c6539c1ca2ce11ee539481fac03983cd6cb0a86606fd601c64ff536f7a5799e06d5441c7eff00cdd8222essdeep: 6144:pLExaqvRuqh931pIwuZ0/GBzqiH859y1gH67QTy6zmBIUm/acyB0cht0dr3xyFS:pLE0fqhtc05I1h6yi2IUHh/to3Wptype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: xa9 Children cow Corporation. All rights reservedInternalName: Hunt effectFileVersion: 7.4.2.656CompanyName: Children cow CorporationProductName: Children cowxae Free racexaeHeat: 753700ProductVersion: 7.4.2.656FileDescription: Children cow Free raceOriginalFilename: after.dll OceantogetherTranslation: 0x0409 0x04b0

Trojandownloader.Cridex also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.45817489
FireEye	Generic.mg.c430c3f7ea936f4d
CAT-QuickHeal	Trojandownloader.Cridex
ALYac	Trojan.GenericKD.45817489
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Dridex.NQ
K7AntiVirus	Trojan ( 005789a61 )
BitDefender	Trojan.GenericKD.45817489
K7GW	Trojan ( 005789a61 )
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/Kryptik.DMM.gen!Eldorado
Avast	Win32:CrypterX-gen [Trj]
Kaspersky	HEUR:Trojan-Downloader.Win32.Cridex.gen
AegisLab	Trojan.Win32.Cridex.a!c
Ad-Aware	Trojan.GenericKD.45817489
Emsisoft	Trojan.Crypt (A)
Comodo	Malware@#24iq68svxdkh9
MaxSecure	Trojan.Malware.74221143.susgen
DrWeb	Trojan.Dridex.735
TrendMicro	Trojan.Win32.MALREP.THCOBBA
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Crypt
Webroot	W32.Trojan.Gen
MAX	malware (ai score=87)
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Dridex.NQ!MTB
Gridinsoft	Trojan.Win32.Downloader.oa
Arcabit	Trojan.Generic.D2BB1E91
ZoneAlarm	HEUR:Trojan-Downloader.Win32.Cridex.gen
GData	Trojan.GenericKD.45817489
Cynet	Malicious (score: 90)
AhnLab-V3	Trojan/Win32.Generic.C4357065
McAfee	GenericRXNU-ND!C430C3F7EA93
VBA32	TrojanDownloader.Cridex
Malwarebytes	Trojan.Dridex
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Kryptik.HJSK
TrendMicro-HouseCall	Trojan.Win32.MALREP.THCOBBA
Rising	Downloader.Cridex!8.F70 (C64:YzY0Onwh1iGRzYOL)
Fortinet	PossibleThreat.MU
AVG	Win32:CrypterX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Dridex.HgkASQAA