Worm.Cridex.B
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 50 % (Medium) |
| Infected Computers: | 1,468 |
| First Seen: | November 4, 2011 |
| Last Seen: | June 6, 2026 |
| OS(es) Affected: | Windows |
The detection of Worm.Cridex.B on your system indicates a potential security threat that requires immediate attention. This malware is designed to replicate itself and spread to other computers, potentially causing harm to your data and system performance. It is essential to understand the nature of this threat and take prompt action to remove it and prevent future infections.
Table of Contents
What Is Worm.Cridex.B?
Worm.Cridex.B is a type of malware that can infect computers without the need for user interaction. Its primary goal is to spread to other systems, often through exploited vulnerabilities or by attaching itself to other programs. The name "Worm.Cridex.B" suggests that it is a variant of a known malware, but the specifics of its operation and impact can vary. Understanding that malware can evolve and change, it's crucial to focus on general removal and prevention strategies rather than specific details that might quickly become outdated.
How Worm.Cridex.B Operates
Malware like Worm.Cridex.B typically operates by exploiting system vulnerabilities to gain access to a computer. Once inside, it can start replicating itself, spreading to other parts of the system, and potentially to other computers through network connections. It may also download additional malicious components or create backdoors for remote access. The exact mechanisms can vary, but the overall goal is often to compromise system security for malicious purposes, such as data theft or using the infected computer as part of a botnet for distributed attacks.
Symptoms of Infection
Symptoms of a Worm.Cridex.B infection can be subtle at first but may become more pronounced as the malware spreads and compromises system resources. Common signs include slow system performance, unexpected crashes, and unusual network activity. You might also notice unfamiliar programs or processes running in the background, and in some cases, files may be modified or deleted without your knowledge. Since malware can hide its activities, some infections might not display obvious symptoms, making regular system checks and antivirus scans crucial for early detection.
How to Remove Worm.Cridex.B
- Enter Safe Mode with Networking to limit the malware's ability to spread or interfere with the removal process. This mode allows you to use the internet to download necessary tools while minimizing system activity.
- Perform a full scan of your system using a reputable antivirus tool, such as SpyHunter. Ensure your antivirus software is updated to the latest version to increase the chances of detecting and removing the malware effectively.
- Uninstall suspicious programs that you do not recognize or that were installed around the time the malware was detected. Be cautious and only remove programs you are sure are not needed or are known to be malicious.
- Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings. This can help remove any malicious extensions or settings changes made by the malware.
- After completing the above steps, reboot your computer and perform another full scan to ensure the malware has been completely removed. Repeat the scanning process until no threats are detected to confirm the removal was successful.
Conclusion
Removing Worm.Cridex.B requires a systematic approach to ensure all components of the malware are eliminated from your system. By following the steps outlined above and maintaining good computer hygiene, such as regularly updating your operating system and antivirus software, avoiding suspicious downloads, and being cautious with email attachments, you can significantly reduce the risk of future infections. Remember, prevention and early detection are key to protecting your digital assets and maintaining system security.
Aliases
15 security vendors flagged this file as malicious.
| Antivirus Vendor | Detection |
|---|---|
| AVG | SHeur4.SJJ |
| Fortinet | W32/Yakes.B!tr |
| Antiy-AVL | Trojan/Win32.Dapato.gen |
| Sophos | Troj/Zbot-BNJ |
| AntiVir | Worm/Cridex.B.79 |
| BitDefender | Trojan.Generic.KD.547797 |
| Kaspersky | Trojan-Dropper.Win32.Dapato.aeuk |
| McAfee | Generic.bfr!ek |
| CAT-QuickHeal | Worm.Cridex |
| Panda | Trj/Genetic.gen |
| AVG | Dropper.Generic7.CLFO |
| Fortinet | W32/Injector.ZVR!tr |
| AhnLab-V3 | Trojan/Win32.Zbot |
| AntiVir | TR/Agent.135168.156 |
| Kaspersky | Trojan-Dropper.Win32.Dapato.cbzv |
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | syitm.exe | 291a7a563820f3a52c35bb1bc5a69f6f | 25 |
| 2. | lmsxqcbysw.exe | ddbcb37b750a7558bcc88118f0d96ee9 | 15 |
| 3. | Protection.exe | ee5f80e4d3a4b14a72255b4b875f547f | 11 |
| 4. | jodrive32.exe | 104f8c14a26836fdb665dbe89ec6c578 | 7 |
| 5. | DTite.exe | 6f12c5a35a6934cae04509b5ef544551 | 6 |
| 6. | Boonty.exe | f5539e7e4a4bfe6946a2e133ff593b71 | 5 |
| 7. | KB00033595.exe | 417841bff309c1261eb0e42d80ead7ad | 5 |
| 8. | RegFast.exe | 4ff7e022f86ac6dc20ed2f7779b1582e | 4 |
| 9. | csrss.exe | 8740a9dfed239ddd4a11de5b99b44e1b | 4 |
| 10. | snpr.exe | 8e5b78bfe0013a8717b550e1b4509a3e | 3 |
| 11. | KB724257.exe | bc7d442906437eebebb6a21e20a35dd1 | 3 |
| 12. | KB00706635.exe | 7a8a7250e99f2856ff1b2792e5c391ee | 2 |
| 13. | KB00300586.exe | d3ccd99936bd4a904ca0e2e2a50936fd | 2 |
| 14. | Qtasai.scr | e80ae6ff28ef78cfb12a927a86517677 | 2 |
| 15. | KB00765271.exe | 28b6eabdde29421eb00f07119e803e39 | 2 |
| 16. | KB00450223.exe | ef0e291414e6e8848985f14c3c1d056c | 2 |
| 17. | 74472b74.dll | 25976c7732707537f5fd5c20540dba73 | 1 |
| 18. | KB00012088.exe | 5c2db9405e1828a5909d7b7dacc5c2fd | 1 |
| 19. | KB00256353.exe | 8c23e55f7b0ca489bb4b05f9c6721761 | 1 |
| 20. | KB00818303.exe | 98f669d6e8a0b92401dc6bd6ed1291d4 | 1 |
| 21. | KB00574440.exe | 783be0270efa0235b19b4e7182ece043 | 1 |
| 22. | KB00009976.exe | 9df3e9fb927c7d846ca1337758ef5d60 | 1 |
| 23. | KB00158076.exe | 947a37cab6737c1a506b6098db864f31 | 1 |
| 24. | kb00737510.exe | 51be3218c2c6df6600bb2127402f9f11 | 1 |
| 25. | KB00866601.exe | e0e2888476ee55cab70f43d57fd4e949 | 1 |
| 26. | __kb00066679.exe | 038be3d87c1bb305f6bb2706d7718b6f | 1 |
| 27. | KB00144083.exe | acdd4c2a377933d89139b5ee6eefc464 | 1 |