About “Backdoor.Win32.Emotet.bswn” infection

The Backdoor.Win32.Emotet.bswn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Emotet.bswn virus can do?

• Executable code extraction
• Creates RWX memory
• Mimics the system’s user agent string for its own requests
• Expresses interest in specific running processes
• HTTP traffic contains suspicious features which may be indicative of malware related traffic
• Performs some HTTP requests
• The binary likely contains encrypted or compressed data.
• Attempts to modify proxy settings
• Anomalous binary characteristics

How to determine Backdoor.Win32.Emotet.bswn?

File Info:
crc32: D63BA241
md5: a8a77560cd73d9bb7419477732310225
name: upload_file
sha1: 76020b57a93429270e826b4966009329ac2c9dac
sha256: fa2164c99e5e2f4f1ae1fff1bdf20e8d614549fc2dd44fe3b2c649735773cd66
sha512: 47b235ab295d27ec0130dfa35477bce80f3bf890d28c22259ef08f74700af07594056927fda3b28be4dde83540ce522592f3a7b6b7d9a8df0043e6f467253aa2
ssdeep: 768:LGEgbXnp5TK0LR8n4oWPjv5U6CNedJL6jk9CJExFO2smXKZ6KW+DZXWQ2Wm4Co:J0LOjAxCsdJL6jYFO2sZgKW+Vf2r4C
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2003
InternalName: UseShGetFileInfoDemo
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: UseShGetFileInfoDemo Application
ProductVersion: 1, 0, 0, 1
FileDescription: UseShGetFileInfoDemo MFC Application
OriginalFilename: UseShGetFileInfoDemo.EXE
Translation: 0x0409 0x04b0

Backdoor.Win32.Emotet.bswn also known as:

How to remove Backdoor.Win32.Emotet.bswn?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.