In this post, I am going to detail the way the Dukrid trojan injected right into your system, and also how to get rid of Dukrid trojan virus.
What is Dukrid trojan?
Name | Dukrid |
Infection Type | Trojan |
Symptoms |
|
Similar behavior | Occamy, Proscks, Harnig, Flood, Venik, Maener |
Fix Tool | See If Your System Has Been Affected by Dukrid trojan |
Trojan viruses are among the leading malware sorts by its injection rate for quite a long period of time. And currently, during the pandemic, when malware became extremely active, trojan viruses increased their activity, too. You can see a lot of messages on different resources, where people are whining concerning the Dukrid trojan virus in their computers, and also asking for aid with Dukrid trojan virus removal.
Trojan Dukrid is a type of virus that injects into your personal computer, and then executes a wide range of malicious functions. These functions depend on a type of Dukrid trojan: it may work as a downloader for other malware or as a launcher for an additional malicious program which is downloaded along with the Dukrid trojan. Throughout the last 2 years, trojans are also distributed using email attachments, and most of cases utilized for phishing or ransomware infiltration.
Dukrid2 also known as
Bkav | W32.AIDetect.malware1 |
K7AntiVirus | P2PWorm ( 0009f5cb1 ) |
Elastic | malicious (high confidence) |
DrWeb | Trojan.DiamondFox.4 |
Cynet | Malicious (score: 100) |
ALYac | Gen:Heur.PonyStealer.zm0@ce@S1ibi |
Cylance | Unsafe |
Zillya | Trojan.Snojan.Win32.514 |
Sangfor | Trojan.Win32.VB.8 |
CrowdStrike | win/malicious_confidence_100% (W) |
Alibaba | Trojan:Win32/Snojan.562df9da |
K7GW | P2PWorm ( 0009f5cb1 ) |
Cybereason | malicious.f6148f |
Cyren | W32/VB.PP.gen!Eldorado |
Symantec | ML.Attribute.HighConfidence |
ESET-NOD32 | Win32/VB.OGM |
APEX | Malicious |
Avast | Win32:Malware-gen |
ClamAV | Win.Packer.VbPack-0-6334882-0 |
Kaspersky | Trojan.Win32.Snojan.pdu |
BitDefender | Gen:Heur.PonyStealer.zm0@ce@S1ibi |
NANO-Antivirus | Trojan.Win32.Snojan.enizvu |
ViRobot | Trojan.Win32.Z.Snojan.413696.H |
MicroWorld-eScan | Gen:Heur.PonyStealer.zm0@ce@S1ibi |
Tencent | Malware.Win32.Gencirc.114a390a |
Ad-Aware | Gen:Heur.PonyStealer.zm0@ce@S1ibi |
Sophos | ML/PE-A + Troj/VBInjec-LH |
Comodo | Malware@#3ta5znpvrhw8k |
BitDefenderTheta | Gen:NN.ZevbaF.34266.zm0@ae@S1ibi |
VIPRE | Trojan.Win32.Generic!BT |
TrendMicro | TSPY_ZBOT.YUYAXA |
FireEye | Generic.mg.bc1e17bf6148fa29 |
Emsisoft | Gen:Heur.PonyStealer.zm0@ce@S1ibi (B) |
SentinelOne | Static AI – Malicious PE |
Jiangmin | Trojan.Snojan.lf |
Webroot | W32.Trojan.Gen |
Avira | HEUR/AGEN.1117871 |
eGambit | Unsafe.AI_Score_100% |
Antiy-AVL | Trojan/Generic.ASMalwS.1F48FDE |
Microsoft | Trojan:Win32/Dukrid.A!bit |
GData | Gen:Heur.PonyStealer.zm0@ce@S1ibi |
AhnLab-V3 | Win-Trojan/VBKrypt.RP.X1764 |
McAfee | GenericRXBE-HJ!BC1E17BF6148 |
MAX | malware (ai score=100) |
VBA32 | Trojan.Snojan |
Panda | Trj/GdSda.A |
TrendMicro-HouseCall | TSPY_ZBOT.YUYAXA |
Yandex | Trojan.GenAsa!PDuyMOzT4yU |
Ikarus | Trojan.Win32.VB |
Fortinet | W32/Generic.AC.31EFB1!tr |
AVG | Win32:Malware-gen |
Paloalto | generic.ml |
Domains that associated with Dukrid:
0 | z.whorecord.xyz |
1 | a.tomx.xyz |
What are the symptoms of Dukrid trojan?
- Executable code extraction;
- Injection (inter-process);
- Injection (Process Hollowing);
- Creates RWX memory;
- Reads data out of its own binary image;
- Drops a binary and executes it;
- Executed a process and injected code into it, probably while unpacking;
- Detects VirtualBox through the presence of a library;
- Detects VMware through the presence of a library;
- Detects Sandboxie through the presence of a library;
- Detects Avast Antivirus through the presence of a library;
- Installs itself for autorun at Windows startup;
- Detects VirtualBox through the presence of a file;
- Detects VMware through the presence of a file;
- Creates a copy of itself;
- Attempts to interact with an Alternate Data Stream (ADS);
- Creates a slightly modified copy of itself;
- Anomalous binary characteristics;
The common symptom of the Dukrid trojan virus is a gradual appearance of a wide range of malware – adware, browser hijackers, and so on. As a result of the activity of these destructive programs, your personal computer comes to be really lagging: malware consumes substantial quantities of RAM and CPU capacities.
Another visible impact of the Dukrid trojan virus existence is unfamiliar operations displayed in task manager. Sometimes, these processes may try to simulate system processes, however, you can understand that they are not legit by taking a look at the source of these processes. Quasi system applications and Dukrid trojan’s processes are always listed as a user’s processes, not as a system’s.
How to remove Dukrid trojan virus?
- Download and install Loaris Trojan Remover.
- Open Loaris and perform a “Standard scan“.
- “Move to quarantine” all items.
- Open “Tools” tab – Press “Reset Browser Settings“.
- Approve the reset pressing “Yes” button in the appeared window.
- Restart your computer.
To remove Dukrid trojan and ensure that all satellite malware, downloaded with the help of this trojan, will be wiped out, too, I’d suggest you to use Loaris Trojan Remover.
Dukrid removal guide
To detect and remove all malware on your personal computer using Loaris Trojan Remover, it’s better to use Standard or Full scan. Removable scan, as well as Custom, will scan only specified directories, so such types of scans cannot provide the full information.
You can observe the detects during the scan process lasts. Nevertheless, to perform any actions against detected malware, you need to wait until the scan is over, or to interrupt the scan.
To choose the appropriate action for each detected malicious programs, click the knob in front of the name of detected malicious programs. By default, all viruses will be moved to quarantine.
How to remove Dukrid Trojan?
Name: Dukrid
Description: Trojan Dukrid is a kind of virus that infiltrates into your computer, and after that performs different destructive functions. These features depend upon a type of Dukrid trojan: it can act as a downloader for many other malware or as a launcher for another destructive program which is downloaded in addition to the Dukrid trojan. During the last two years, trojans are also dispersed via e-mail attachments, and most of situations utilized for phishing or ransomware infiltration.
Operating System: Windows
Application Category: Trojan
User Review
( votes)- What is Trojan Horse: https://en.wikipedia.org/wiki/Trojan_horse_(computing)
- Dukrid VirusTotal Report: