Backdoor.Win32.Emotet.aidy malicious file

The Backdoor.Win32.Emotet.aidy is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Emotet.aidy virus can do?

• Executable code extraction
• Creates RWX memory
• Mimics the system’s user agent string for its own requests
• Expresses interest in specific running processes
• HTTP traffic contains suspicious features which may be indicative of malware related traffic
• Performs some HTTP requests
• Unconventionial language used in binary resources: Chinese (Simplified)
• Attempts to modify proxy settings

How to determine Backdoor.Win32.Emotet.aidy?

File Info:
crc32: 119242C4
md5: 436430a9e6111f6358c5afe4b090d232
name: upload_file
sha1: b70bcdbd8577706725397fb0558a950ad7f0fb4c
sha256: f28d480e0eb6c51f13d41637e41f3e60d608f3e7c76a11d0345fe30b140889e0
sha512: 420046ec8afc005e25c0f1da193034add1532035dc601387e2a2b13383158d20d809a103616eeeabbe86335e2d9e13a3abcc1e6368551aebf01b5e64f6afe961
ssdeep: 12288:3UXLmvzeDn+mG+rAJ+jbmYknd73u5t3Ygx+J:3Umen+4rAUmdRCHM
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2005
InternalName: CHexEditDemo
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: CHexEditDemo Application
ProductVersion: 1, 0, 0, 1
FileDescription: CHexEditDemo MFC Application
OriginalFilename: CHexEditDemo.EXE
Translation: 0x0409 0x04b0

Backdoor.Win32.Emotet.aidy also known as:

How to remove Backdoor.Win32.Emotet.aidy?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.