Backdoor.Win32.Emotet.azcf information

The Backdoor.Win32.Emotet.azcf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Emotet.azcf virus can do?

Executable code extraction
Creates RWX memory
Mimics the system’s user agent string for its own requests
Expresses interest in specific running processes
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Backdoor.Win32.Emotet.azcf?


File Info:
crc32: 6D3D7F38
md5: f376e0e76d6f343ecbbc203a0d418a69
name: upload_file
sha1: 91886ad8df8a4e04e3d3732386194299d02bceee
sha256: 025e322f082762e8b9ea4bcfe923cf8e2139cc1455f4073f327f23035da7f430
sha512: f979f450b5bf56031b25098640b6e32503afef3eb09fe588480e28b726397006af82a897a76d2a73793a16a389efdf35ba8fbc2ea26fbca6094778e4915e35d4
ssdeep: 12288:Ddq2982XqwpszV8ski5NeT0sjVZWtYz2QghDmvQhmHo9LWlNsOY8Uuk:DQ291fLski5N6ZWyz2QglbmHo9LGpG
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2002
InternalName: TabDrives
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: TabDrives Application
ProductVersion: 1, 0, 0, 1
FileDescription: TabDrives MFC Application
OriginalFilename: TabDrives.EXE
Translation: 0x0409 0x04b0

Backdoor.Win32.Emotet.azcf also known as:

MicroWorld-eScan	Trojan.GenericKDZ.69165
FireEye	Trojan.GenericKDZ.69165
CAT-QuickHeal	Backdoor.Emotet
McAfee	Emotet-FRI!F376E0E76D6F
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Emotet.L!c
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKDZ.69165
K7GW	Riskware ( 0040eff71 )
F-Prot	W32/Emotet.AOH.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
GData	Trojan.GenericKDZ.69165
Kaspersky	Backdoor.Win32.Emotet.azcf
Alibaba	Trojan:Win32/Emotet.0590f99b
NANO-Antivirus	Trojan.Win32.Emotet.hpwjde
Rising	Trojan.Kryptik!1.C71F (CLASSIC)
Emsisoft	Trojan.Emotet (A)
F-Secure	Trojan.TR/AD.Emotet.dadaq
DrWeb	Trojan.DownLoader34.14057
Zillya	Backdoor.Emotet.Win32.842
TrendMicro	TrojanSpy.Win32.EMOTET.THHODBO
Sophos	Troj/Emotet-CKN
Ikarus	Trojan-Banker.Emotet
Cyren	W32/Emotet.AOH.gen!Eldorado
Jiangmin	Trojan.Banker.Emotet.oac
Avira	TR/AD.Emotet.dadaq
MAX	malware (ai score=87)
Antiy-AVL	Trojan[Banker]/Win32.Emotet
Arcabit	Trojan.Generic.D10E2D
ZoneAlarm	Backdoor.Win32.Emotet.azcf
Microsoft	Trojan:Win32/Emotet.ARJ!MTB
AhnLab-V3	Trojan/Win32.Emotet.R346629
VBA32	BScope.Trojan.Emotet
ALYac	Trojan.GenericKDZ.69165
TACHYON	Trojan/W32.Agent.993792.AK
Ad-Aware	Trojan.GenericKDZ.69165
Malwarebytes	Trojan.Emotet
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Kryptik.HFHN
TrendMicro-HouseCall	TrojanSpy.Win32.EMOTET.THHODBO
Tencent	Malware.Win32.Gencirc.10cde55c
Fortinet	W32/GenKryptik.EPAZ!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Generic/Trojan.50c

How to remove Backdoor.Win32.Emotet.azcf?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Backdoor.Win32.Emotet.azcf information