Backdoor.Win32.Emotet.aijx removal instruction

The Backdoor.Win32.Emotet.aijx is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Emotet.aijx virus can do?

Executable code extraction
Creates RWX memory
Mimics the system’s user agent string for its own requests
Expresses interest in specific running processes
Unconventionial language used in binary resources: Chinese (Simplified)
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Backdoor.Win32.Emotet.aijx?


File Info:
crc32: 7661583C
md5: c8cc5f7e1fe0c15f8172c889e2ab24ff
name: upload_file
sha1: ade0eeed4e9475aa633560ab9cbde6838bf646cb
sha256: cf947c26e8c5eb8f9981ba48a0f7f7b4fe02aaa1c2412ec2342326fd4c47fdfd
sha512: 8f9d6a19e119564d406814e70b53cb2cb2e3e9700b099a6e18f2405e82249956b2652a6b0a241d1dfb9da2cba3ed5863e1696e6f7310debcf870b2e5ce6b3143
ssdeep: 12288:LUXLmvzeDn+mG+rAJ+jbmYknd73bUdWWqgbc:LUmen+4rAUmdR4fY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2005
InternalName: CHexEditDemo
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: CHexEditDemo Application
ProductVersion: 1, 0, 0, 1
FileDescription: CHexEditDemo MFC Application
OriginalFilename: CHexEditDemo.EXE
Translation: 0x0409 0x04b0

Backdoor.Win32.Emotet.aijx also known as:

Elastic	malicious (high confidence)
FireEye	Generic.mg.c8cc5f7e1fe0c15f
McAfee	Emotet-FRI!C8CC5F7E1FE0
K7AntiVirus	Trojan ( 005600f21 )
BitDefender	Trojan.Agent.EUFQ
K7GW	Trojan ( 005600f21 )
TrendMicro	TROJ_GEN.R002C0DGU20
F-Prot	W32/Emotet.AOD.gen!Eldorado
Symantec	Trojan.Emotet
APEX	Malicious
Avast	Win32:BankerX-gen [Trj]
Kaspersky	Backdoor.Win32.Emotet.aijx
Alibaba	Trojan:Win32/Emotet.45262b60
AegisLab	Trojan.Win32.Emotet.L!c
MicroWorld-eScan	Trojan.Agent.EUFQ
Rising	Trojan.Kryptik!1.C80B (CLOUD)
Ad-Aware	Trojan.Agent.EUFQ
Emsisoft	Trojan.Emotet (A)
F-Secure	Trojan.TR/Kryptik.qqorx
DrWeb	Trojan.DownLoader34.9534
VIPRE	Trojan.Win32.Generic!BT
Invincea	heuristic
Fortinet	W32/Emotet.FHGO!tr
Sophos	Troj/Emotet-CKJ
Ikarus	Trojan-Banker.Emotet
Cyren	W32/Emotet.AOD.gen!Eldorado
Avira	TR/Kryptik.qqorx
MAX	malware (ai score=87)
Arcabit	Trojan.Agent.EUFQ
ZoneAlarm	Backdoor.Win32.Emotet.aijx
Microsoft	Trojan:Win32/Emotet.PEE!MTB
AhnLab-V3	Trojan/Win32.Emotet.R346335
BitDefenderTheta	Gen:NN.ZexaF.34144.Pq0@aCZ7HKaj
ALYac	Trojan.Agent.EUFQ
Malwarebytes	Trojan.MalPack.TRE
Panda	Trj/Emotet.C
ESET-NOD32	Win32/Emotet.CD
TrendMicro-HouseCall	TROJ_GEN.R002C0DGU20
GData	Trojan.Agent.EUFQ
AVG	Win32:BankerX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Generic/Trojan.f52

How to remove Backdoor.Win32.Emotet.aijx?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Backdoor.Win32.Emotet.aijx removal instruction