Backdoor.Win32.Emotet.aivh information

The Backdoor.Win32.Emotet.aivh is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Emotet.aivh virus can do?

Executable code extraction
Creates RWX memory
Mimics the system’s user agent string for its own requests
Expresses interest in specific running processes
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Unconventionial language used in binary resources: Russian
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Backdoor.Win32.Emotet.aivh?


File Info:
crc32: EC3C4F39
md5: 8863468413e20b8d1cd4ac7d90416869
name: upload_file
sha1: f19ab65088f6165c1c95bdee209a2bedf764f230
sha256: fa64a56a581f4fd325a2908d3f334e40e4a3a6d92b3a4fbb47518108ca396311
sha512: 2e27a6fd2d10b94e5879d2bd9cea128bc4760020b2a663de7c5ff33a06d3188ac1b84190e8d0d42bc02c37472900b0f21d85ef2c6e7c5e94bf7bf036b8d1a38a
ssdeep: 6144:lEUGyPNs/0SxfioredWL8ExpZkMVbtH6D6ncZe9y:lEUGys0kfgdWLfpZkMVbSYcZeI
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2003
InternalName: FileTreeDialog
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: FileTreeDialog Application
ProductVersion: 1, 0, 0, 1
FileDescription: FileTreeDialog MFC Application
OriginalFilename: FileTreeDialog.EXE
Translation: 0x0409 0x04b0

Backdoor.Win32.Emotet.aivh also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.69108
FireEye	Trojan.GenericKDZ.69108
McAfee	Emotet-FRI!8863468413E2
VIPRE	Trojan.Win32.Generic!BT
BitDefender	Trojan.GenericKDZ.69108
K7GW	Trojan ( 005600f21 )
BitDefenderTheta	Gen:NN.ZexaE.34144.tq0@aaNK0@fk
Cyren	W32/Emotet.AOC.gen!Eldorado
Symantec	Trojan.Emotet
ESET-NOD32	Win32/Emotet.CD
APEX	Malicious
Avast	Win32:BankerX-gen [Trj]
Kaspersky	Backdoor.Win32.Emotet.aivh
Alibaba	Trojan:Win32/Emotet.28e36ea6
ViRobot	Trojan.Win32.Emotet.323584.C
AegisLab	Trojan.Win32.Emotet.L!c
Ad-Aware	Trojan.GenericKDZ.69108
Sophos	Troj/Emotet-CKK
DrWeb	Trojan.DownLoader34.10720
TrendMicro	TROJ_GEN.R002C0DGU20
Fortinet	W32/GenKryptik.EPAZ!tr
Emsisoft	Trojan.Emotet (A)
Ikarus	Trojan-Banker.Emotet
F-Prot	W32/Emotet.AOC.gen!Eldorado
MAX	malware (ai score=89)
Arcabit	Trojan.Generic.D10DF4
AhnLab-V3	Trojan/Win32.Emotet.R346328
ZoneAlarm	Backdoor.Win32.Emotet.aivh
Microsoft	Trojan:Win32/Emotet.AER!MTB
ALYac	Trojan.GenericKDZ.69108
Malwarebytes	Trojan.MalPack.TRE
TrendMicro-HouseCall	TROJ_GEN.R002C0DGU20
Rising	Backdoor.Emotet!8.514D (CLOUD)
GData	Trojan.GenericKDZ.69108
AVG	Win32:BankerX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Win32/Trojan.653

How to remove Backdoor.Win32.Emotet.aivh?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Backdoor.Win32.Emotet.aivh information