Backdoor

Backdoor.Win32.Emotet.aqje removal

Malware Removal

The Backdoor.Win32.Emotet.aqje is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Win32.Emotet.aqje virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Mimics the system’s user agent string for its own requests
  • Expresses interest in specific running processes
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Attempts to modify proxy settings

How to determine Backdoor.Win32.Emotet.aqje?


File Info:

crc32: 3AFECEB5
md5: 2950111081ff44bd19d6d39315d78e77
name: upload_file
sha1: 03a6386d6894d9c5ebdc1daca685b0ead573ef5a
sha256: f014092a79155c86afb1f17606d482be5d2904744ab5f3232927080f5f85ac8c
sha512: bb686b9a13698bce2fae8857f181ed478bea12608636faf2cc621510e579caa3e3b01ddb62402f5cc3710d879be1e560210b7bf0e5829b0b69ed0b5616a772ef
ssdeep: 12288:wH9tNCsqbIoCyJgllh/krhM7UqKsRR2Bw:2tEfbjJglvhyBw
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2000
InternalName: MsAgentHelp
FileVersion: 1, 0, 0, 1
CompanyName:
LegalTrademarks:
ProductName: MsAgentHelp Application
ProductVersion: 1, 0, 0, 1
FileDescription: MsAgentHelp MFC Application
OriginalFilename: MsAgentHelp.EXE
Translation: 0x0409 0x04b0

Backdoor.Win32.Emotet.aqje also known as:

MicroWorld-eScanTrojan.GenericKD.43573608
FireEyeGeneric.mg.2950111081ff44bd
Qihoo-360Win32/Backdoor.dca
McAfeeEmotet-FRI!2950111081FF
MalwarebytesTrojan.MalPack.TRE
AegisLabTrojan.Win32.Generic.4!c
K7AntiVirusTrojan ( 0056ba551 )
BitDefenderTrojan.GenericKD.43573608
K7GWTrojan ( 0056ba551 )
Invinceaheuristic
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:BankerX-gen [Trj]
GDataTrojan.GenericKD.43573608
KasperskyBackdoor.Win32.Emotet.aqje
AlibabaTrojan:Win32/Emotet.8f140bfe
NANO-AntivirusTrojan.Win32.Emotet.hpmpiz
Endgamemalicious (high confidence)
SophosTroj/Emotet-CKL
DrWebTrojan.Emotet.995
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R044C0DGV20
EmsisoftTrojan.Emotet (A)
IkarusTrojan-Banker.Emotet
CyrenW32/Trojan.TTFQ-7841
JiangminBackdoor.Emotet.pe
MAXmalware (ai score=85)
Antiy-AVLTrojan[Backdoor]/Win32.Emotet
ArcabitTrojan.Generic.D298E168
ZoneAlarmBackdoor.Win32.Emotet.aqje
MicrosoftTrojan:Win32/Emotet.ARJ!MTB
AhnLab-V3Trojan/Win32.Emotet.R346459
VBA32BScope.Trojan.Emotet
ALYacTrojan.GenericKD.43573608
Ad-AwareTrojan.GenericKD.43573608
CylanceUnsafe
PandaTrj/Emotet.C
ESET-NOD32a variant of Win32/Kryptik.HFGP
TrendMicro-HouseCallTROJ_GEN.R044C0DGV20
RisingTrojan.Kryptik!1.C82B (CLOUD)
FortinetW32/GenKryptik.EPAZ!tr
BitDefenderThetaGen:NN.ZexaF.34144.Cq0@aS8UNDoi
AVGWin32:BankerX-gen [Trj]
Paloaltogeneric.ml

How to remove Backdoor.Win32.Emotet.aqje?

Backdoor.Win32.Emotet.aqje removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment