How to remove “Backdoor.Win32.Emotet.akkz”?

The Backdoor.Win32.Emotet.akkz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor.Win32.Emotet.akkz virus can do?

Executable code extraction
Creates RWX memory
Mimics the system’s user agent string for its own requests
Expresses interest in specific running processes
Unconventionial language used in binary resources: Russian

How to determine Backdoor.Win32.Emotet.akkz?


File Info:
crc32: 89E7CCFB
md5: 4c345513c9d1dacfebdc92cd1537c047
name: upload_file
sha1: b3ecee4ea00333cd424ab8792645f4abe7091e79
sha256: 4bf274ca145f32ec7dff4072d56b791cd7e1eecce7ec5b36833479fdedc12812
sha512: 942d951a2f0e9c6b8fa4956b7c169085022fb13509ee9d6d2e440dea3c22c760ce991b9bf1e2de9c72ffec7fa5cf74ca7a93a8fa863bb1e6a75f4a1bb8483eb7
ssdeep: 3072:TETHGNaL1eByO0+yJvoXZ13zVMrJAZ/swfkCWNRTlJwrySDJUi3IXjUlziMN3To:EIuOkoX33WyZEwtWNRByDlPdOwA
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2003
InternalName: FileTreeDialog
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: FileTreeDialog Application
ProductVersion: 1, 0, 0, 1
FileDescription: FileTreeDialog MFC Application
OriginalFilename: FileTreeDialog.EXE
Translation: 0x0409 0x04b0

Backdoor.Win32.Emotet.akkz also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.34261349
FireEye	Trojan.GenericKD.34261349
McAfee	Emotet-FRI!4C345513C9D1
Malwarebytes	Trojan.MalPack.TRE
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan ( 0056b6f11 )
BitDefender	Trojan.GenericKD.34261349
K7GW	Trojan ( 0056b6f11 )
TrendMicro	TROJ_GEN.R002C0DGU20
F-Prot	W32/Emotet.AOC.gen!Eldorado
Symantec	Trojan.Emotet
APEX	Malicious
Avast	Win32:BankerX-gen [Trj]
Kaspersky	Backdoor.Win32.Emotet.akkz
Alibaba	Malware:Win32/BankerX.4d00277b
ViRobot	Trojan.Win32.Z.Outbreak.307200.A
Rising	Trojan.Kryptik!1.C89F (CLOUD)
Ad-Aware	Trojan.GenericKD.34261349
Sophos	Troj/Emotet-CKK
Comodo	fls.noname@0
DrWeb	Trojan.DownLoader34.9808
Invincea	heuristic
Emsisoft	Trojan.Emotet (A)
Cyren	W32/Emotet.AOC.gen!Eldorado
Fortinet	W32/GenKryptik.EOMR!tr
ZoneAlarm	Backdoor.Win32.Emotet.akkz
Microsoft	Trojan:Win32/Emotet.ARJ!MTB
AhnLab-V3	Trojan/Win32.Emotet.R346328
ALYac	Trojan.GenericKD.34261349
Panda	Trj/Emotet.C
ESET-NOD32	a variant of Win32/Kryptik.HFGD
TrendMicro-HouseCall	TROJ_GEN.R002C0DGU20
Tencent	Win32.Backdoor.Emotet.Pdmi
MAX	malware (ai score=83)
GData	Trojan.GenericKD.34261349
AVG	Win32:BankerX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Generic/Trojan.870

How to remove Backdoor.Win32.Emotet.akkz?

Backdoor.Win32.Emotet.akkz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X