Categories: Trojan

Trojan:Win32/Adduser removal instruction

The Trojan:Win32/Adduser is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Adduser virus can do?

Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Uses Windows utilities for basic functionality
Attempts to restart the guest VM

Related domains:

z.whorecord.xyz

a.tomx.xyz

edgedl.me.gvt1.com

update.googleapis.com

ic-b0696600-1475e2-windowsupdate61.s.loris.llnwd.net

How to determine Trojan:Win32/Adduser?


File Info:
crc32: 0BDACC3Bmd5: 0ae8b894dcbe6b1ec0a2ad8e6debe32aname: 0AE8B894DCBE6B1EC0A2AD8E6DEBE32A.mlwsha1: de789e8a4564daee46238bad9842dcec89065ecasha256: bdf319e1783a4adebf60300da19dae1c3f920a858671ea2707b61c1c6260b530sha512: 399d5cb21b8835cae9f3407a65b07b02e78589e64ff02fccbb59a5b5a8c4fd868b182de06ada3aa28cddf56b504821de66cab85719838e5d431efda3f07f8799ssdeep: 6144:K2681WUqicX91Ch5ygR0CiKGgITLkuxY1Sc8lMjN7C7Zc7maFnjY:KlTicX9MkgR0CtG6ZBjNm14maitype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: www.yijingying.com-qqx524dx7ebfFileVersion: 1.0.0.0CompanyName: QQx524dx7ebfComments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.eyuyan.com)ProductName: x6613x8bedx8a00x7a0bx5e8fProductVersion: 1.0.0.0FileDescription: x6613x8bedx8a00x7a0bx5e8fTranslation: 0x0804 0x04b0

Trojan:Win32/Adduser also known as:

K7AntiVirus	Trojan ( 0007fbf81 )
Lionic	Trojan.Win32.AddUser.lrbF
Elastic	malicious (high confidence)
DrWeb	Trojan.Adduser.159
ClamAV	Win.Trojan.Agent-1111812
CAT-QuickHeal	Trojan.Aduser.A4
ALYac	Trojan.GenericKD.30751012
Malwarebytes	Trojan.Dropper
Zillya	Trojan.AddUser.Win32.167
Sangfor	Win.Malware.Zusy-6840460-0
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/AddUser.08ce60bc
K7GW	Trojan ( 0007fbf81 )
Cybereason	malicious.4dcbe6
Baidu	Win32.Trojan.AddUser.a
Cyren	W32/Agent.EW.gen!Eldorado
Symantec	SMG.Heur!gen
ESET-NOD32	Win32/AddUser.V
Zoner	Trojan.Win32.92199
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.AddUser.jk
BitDefender	Trojan.GenericKD.30751012
NANO-Antivirus	Trojan.Win32.AddUser.ekkiua
MicroWorld-eScan	Trojan.GenericKD.30751012
Tencent	Trojan.Win32.Winlock.g
Ad-Aware	Trojan.GenericKD.30751012
Sophos	Mal/Generic-S
Comodo	Worm.Win32.Dropper.RA@1qraug
F-Secure	Trojan.TR/Adduser.vmnia
BitDefenderTheta	Gen:NN.ZexaF.34088.Iq0@aa!Kbznb
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_ADDUSER_GJ020010.UVPM
McAfee-GW-Edition	BehavesLike.Win32.Dropper.hh
FireEye	Generic.mg.0ae8b894dcbe6b1e
Emsisoft	Trojan.GenericKD.30751012 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.AddUser.f
Webroot	W32.Trojan.Agent.Gen
Avira	TR/Adduser.vmnia
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Win32.AddUser.jk
Microsoft	Trojan:Win32/Adduser
Arcabit	Trojan.Generic.D1D53924
ZoneAlarm	Trojan.Win32.AddUser.jk
GData	Win32.Trojan.PSE.19Q2126
TACHYON	Trojan/W32.AddUser.561152
AhnLab-V3	Trojan/Win32.Agent.R132416
Acronis	suspicious
McAfee	PUP-XAB-JT
MAX	malware (ai score=85)
VBA32	Trojan.AddUser
TrendMicro-HouseCall	TROJ_ADDUSER_GJ020010.UVPM
Rising	Ransom.Adduser!1.A154 (CLASSIC)
Yandex	Trojan.AddUser!26Damdqt4Z0
Ikarus	Trojan.Win32.Neop
MaxSecure	Dropper.Dinwod.frindll
Fortinet	W32/ADDUSER.V!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Trojan.Win32.Extortioner.P