Click on screenshot to zoom
Danger level 9
Type: Worms
Common infection symptoms:
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Slow Computer

Cridex Trojan

Cridex Trojan is a computer infection that can replicate and spread on its own, therefore, even though it is called a Trojan, it should be classified as worm. Since 2012 spring Cridex Trojan targeted more than 137 financial organizations worldwide. In order to infect as many computers as possible this worm uses various distribution channels. Usually, Cridex Trojan spreads via removable disks or network drives, exploiting system vulnerabilities to infect them.

Once Cridex Trojan gets into the target computer it modifies Windows registry's subkey so that the malware could start automatically whenever the system boots. Also, Cridex Trojan is very good at protecting itself from being removed. It tries to hide its presence by injecting malicious codes into legitimate system processes. For example, explorer.exe, firefox.exe and iexplore.exe could be used as a camouflage by Cridex Trojan and the security programs would not consider these processes as treats, even if they carry malicious codes inside.

Most commonly Cridex Trojan uses removable drives to spread from one computer to another. Its copy is usually named randomly and then it is placed in a randomly named folder. Cridex Trojan also comes with a file that initiates autorun whenever the infected drive is plugged into a computer. Once the user accesses the folder with the malicious installation file, his computer gets infected with Cridex Trojan.

Once Cridex Trojan is installed on your computer, it connects to a list of remote IP addresses via port 8080. These addresses include: 84.106.189.124, 190.81.107.70, 202.143.147.35 and many more. When the connection is established, Cridex Trojan reports to its creator that yet another computer has been infected and then receives configuration data and instructions on what to do next. To put it simply, Cridex Trojan greatly compromises your computer, because it can upload data from your system and download more malicious applications.

To protect your computer and yourself from this infection, you need to remove Cridex Trojan immediately. If you cannot do that on your own, acquire a powerful computer security tool and remove Cridex Trojan automatically. Do all it takes to get rid of this infection.

Download Spyware Removal Tool to Remove* Cridex Trojan
  • Quick & tested solution for Cridex Trojan removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Cridex Trojan

Files associated with Cridex Trojan infection:

%AppData%\KB[Random].exe

Cridex Trojan processes to kill:

%AppData%\KB[Random].exe

Remove Cridex Trojan registry entries:

%AppData%\KB[Random].exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
KB[Random].exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.