Backdoor

Backdoor.Win32.Emotet.avzb removal tips

Malware Removal

The Backdoor.Win32.Emotet.avzb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Win32.Emotet.avzb virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Mimics the system’s user agent string for its own requests
  • Expresses interest in specific running processes
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Attempts to modify proxy settings

How to determine Backdoor.Win32.Emotet.avzb?


File Info:

crc32: E2A4CEE4
md5: a0b2fa44fb6d59916f63d2cfd500d82b
name: upload_file
sha1: 470f5185a3bd853f698dd3e5bf545c73152d99ed
sha256: df001172f4c1a8ff1401a16b8a04191ec69f575f256464e3d75fae47840d4a0f
sha512: a3e7051915942bc23cf7de92dee7d513fe710ea08cfe075d0d2e81e29457d531402dceb99eaf6065ce1721cdd19cb39dad3cbdac04781b86bb0ec941979c145e
ssdeep: 12288:Pxn1BXbDf5Ss1Opjjy+MdMhzp419mu6JWxE6psswm7:BbFFOpXy+MR19+W26Cswm7
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2002
InternalName: TabDrives
FileVersion: 1, 0, 0, 1
CompanyName:
LegalTrademarks:
ProductName: TabDrives Application
ProductVersion: 1, 0, 0, 1
FileDescription: TabDrives MFC Application
OriginalFilename: TabDrives.EXE
Translation: 0x0409 0x04b0

Backdoor.Win32.Emotet.avzb also known as:

BkavW32.FamVT.CryprenF.Trojan
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.69152
FireEyeGeneric.mg.a0b2fa44fb6d5991
CAT-QuickHealBackdoor.Emotet
McAfeeEmotet-FRI!A0B2FA44FB6D
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Emotet.L!c
BitDefenderTrojan.GenericKDZ.69152
K7GWTrojan ( 00565ec11 )
K7AntiVirusTrojan ( 00565ec11 )
TrendMicroTROJ_GEN.R002C0DGV20
CyrenW32/Emotet.AOH.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HFHK
TrendMicro-HouseCallTROJ_GEN.R002C0DGV20
Paloaltogeneric.ml
KasperskyBackdoor.Win32.Emotet.avzb
AlibabaTrojan:Win32/Emotet.11ad1ec1
NANO-AntivirusTrojan.Win32.Emotet.hpptvv
ViRobotTrojan.Win32.Emotet.917599
AvastWin32:Trojan-gen
RisingTrojan.Kryptik!1.C89F (CLASSIC)
Ad-AwareTrojan.GenericKDZ.69152
EmsisoftTrojan.Emotet (A)
F-SecureTrojan.TR/Kryptik.iitge
DrWebTrojan.Emotet.994
ZillyaBackdoor.Emotet.Win32.846
Invinceaheuristic
SophosTroj/Emotet-CKN
APEXMalicious
F-ProtW32/Emotet.AOH.gen!Eldorado
JiangminBackdoor.Emotet.pi
WebrootW32.Trojan.Emotet
AviraTR/Kryptik.iitge
FortinetW32/GenKryptik.EJRV!tr
Antiy-AVLTrojan[Banker]/Win32.Emotet
ArcabitTrojan.Generic.D10E20
AhnLab-V3Trojan/Win32.Emotet.R346576
ZoneAlarmBackdoor.Win32.Emotet.avzb
MicrosoftTrojan:Win32/Emotet.ARJ!MTB
ALYacTrojan.GenericKDZ.69152
MAXmalware (ai score=84)
VBA32BScope.Trojan.Emotet
MalwarebytesTrojan.MalPack.TRE
IkarusTrojan-Banker.Emotet
TencentMalware.Win32.Gencirc.10cde54d
GDataTrojan.GenericKDZ.69152
AVGWin32:Trojan-gen
PandaTrj/Genetic.gen
Qihoo-360Win32/Backdoor.c96

How to remove Backdoor.Win32.Emotet.avzb?

Backdoor.Win32.Emotet.avzb removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment