Categories: Malware

Should I remove “Win32/Redosdru.HL”?

The Win32/Redosdru.HL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Redosdru.HL virus can do?

Sample contains Overlay data
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
CAPE detected the OrcusRAT malware family
Anomalous binary characteristics

How to determine Win32/Redosdru.HL?


File Info:
name: 5095020ADA7137F84820.mlwpath: /opt/CAPEv2/storage/binaries/1540a4445fe1ad336596b66335e29ae902f993e7dff5266c509487897fa3d952crc32: DDC0F542md5: 5095020ada7137f8482028b6fe38e78fsha1: 4913a13dea2ccc9e6d30c67e3cd8d8bf988cd0b5sha256: 1540a4445fe1ad336596b66335e29ae902f993e7dff5266c509487897fa3d952sha512: d953f777c844a4ad80b516a728fd215d76b1a024815b45aad20cf3aef180b6974addabc982c4b9c7f2b0ebe156889d4a1a19b200cc44e9cc913f69c8366366d7ssdeep: 3072:E5inqyIvOTtYjLnqSioDXxxuEFw2qbAUeZPUrQ/R/4giyR0mH:uEqdvOTtZSiodxuAzqMvZ5/B4gtimHtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17D149EF54588A85BE3ECD23BD7A1ED52D42858B0025883DF078E483BABAF5571F31896sha3_384: e76ebfdbfdcc1b413c682b1ad16495b7e790ce2911cef58ca1c525ea21382f46d92282ef9a7586180747a9f7ec45267bep_bytes: 90837c24f8097cf9837c24f4fe7ff981timestamp: 2010-07-14 22:06:56
Version Info:
0: [No Data]

Win32/Redosdru.HL also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Bjlog.i!c
MicroWorld-eScan	Gen:Variant.FakeAlert.78
FireEye	Generic.mg.5095020ada7137f8
CAT-QuickHeal	Trojan.Zegost.20529
Skyhigh	BehavesLike.Win32.Generic.ch
McAfee	Generic Dropper.yp
Cylance	unsafe
Zillya	Trojan.Bjlog.Win32.11884
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Password-Stealer ( 002bddbd1 )
Alibaba	TrojanPSW:Win32/Bjlog.5defeb98
K7GW	Password-Stealer ( 002bddbd1 )
Cybereason	malicious.dea2cc
Arcabit	Trojan.FakeAlert.78
Baidu	Win32.Backdoor.Zegost.b
VirIT	Backdoor.Win32.Generic.FBP
Symantec	Backdoor.Trojan
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Redosdru.HL
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Spyware.80656-1
Kaspersky	Trojan-PSW.Win32.Bjlog.aabz
BitDefender	Gen:Variant.FakeAlert.78
NANO-Antivirus	Trojan.Win32.Qqpass.dxoawk
Avast	Win32:Zegost-G [Trj]
Tencent	Backdoor.Win32.Gh0st.s
TACHYON	Trojan-PWS/W32.Bjlog.204406
Emsisoft	Gen:Variant.FakeAlert.78 (B)
F-Secure	Trojan.TR/Drop.Zegost.BA
DrWeb	Trojan.DownLoader1.26310
VIPRE	Gen:Variant.FakeAlert.78
TrendMicro	TROJ_KRYPTK.SM2
Trapmine	malicious.high.ml.score
Sophos	Mal/EncPk-UN
Ikarus	Trojan-PWS.Win32.Bjlog
Jiangmin	Trojan/PSW.Bjlog.des
Webroot	W32.Trojan.Gen
Varist	W32/Agent.I.gen!Eldorado
Avira	TR/Drop.Zegost.BA
Antiy-AVL	Trojan[PSW]/Win32.Bjlog.aabz
Kingsoft	malware.kb.a.1000
Xcitium	TrojWare.Win32.Kryptik.KAZ@2rjk6z
Microsoft	Trojan:Win32/Vindor!pz
ZoneAlarm	Trojan-PSW.Win32.Bjlog.aabz
GData	Win32.Trojan.Httpbot.A
Google	Detected
AhnLab-V3	Trojan/Win32.Bjlog.R2599
VBA32	Malware-Cryptor.General.3
ALYac	Gen:Variant.FakeAlert.78
MAX	malware (ai score=100)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/CI.A
Zoner	Trojan.Win32.90144
TrendMicro-HouseCall	TROJ_KRYPTK.SM2
Rising	Backdoor.Win32.KfBack.q (CLASSIC)
Yandex	Trojan.GenAsa!qXHBe5f1nPw
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.2756052.susgen
Fortinet	W32/Bjlog.GL!tr
BitDefenderTheta	Gen:NN.ZexaF.36744.mSX@a8HarOkb
AVG	Win32:Zegost-G [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)