We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
TrojanDownloader:Win32/Eldycow.gen!A
Detected by Microsoft Defender Antivirus
Aliases: Win32/Hoax.Renos.LQ (ESET) not-virus:Hoax.Win32.Renos.lq (Kaspersky) Generic.dx (McAfee) Trojan.Perfcoo (Symantec) Trojan.Renos.Gen!Pac.5 (VirusBuster)
Summary
TrojanDownloader:Win32/Eldycow.gen!A is a Trojan that receives various instructions to perform on the affected machine from remote hosts. These instructions often include directions to download and execute arbitrary files. In the wild, TrojanDownloader:Win32/Eldycow.gen!A has been observed to download a number of different Trojans from various remote locations, including TrojanDownloader:Win32/Wixud, Trojan:Win32/Wopla, VirTool:WinNT/Rootkitdrv.CE, TrojanDownloader:Win32/Nuwar, PWS:Win32/Cimuz and Trojan:Win32/Adialer.LA.
Manual removal is not recommended for this threat. Use Microsoft Security Essentials or another up-to-date scanning and removal tool to detect and remove this threat and other unwanted software from your computer. For more information on Microsoft security products, see http://www.microsoft.com/protect/products/computer/default.mspx.
Follow us
