Backdoor.Win32.Emotet.cajo information

The Backdoor.Win32.Emotet.cajo is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Emotet.cajo virus can do?

Executable code extraction
Creates RWX memory
Mimics the system’s user agent string for its own requests
Expresses interest in specific running processes
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Unconventionial language used in binary resources: Russian
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Backdoor.Win32.Emotet.cajo?


File Info:
crc32: 174B4961
md5: 10931a3c520d8cdbc22140435a96eae7
name: upload_file
sha1: d2d8b33fc9cff5ffad1c25793253e20c152b1dfc
sha256: 82f930600ac978631184fe836fc33d9d5aa77f7670519e08a30c4600c5e112a3
sha512: a3da4b81f714fc6d5407a018efce1a4e71982bce0cdebbe33d01534648ebe1b5d96fb66be261f5ea62cb99440bedb1c0efe2410e34c77093eba24705955cec56
ssdeep: 3072:KpocVfb++Xuy7YXDxaOhlS7pkxno3mOuTXd4LltbTSdKekyOI:4DZ++eNTxytkucXd4LltbT
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2002
InternalName: ExpCheckTest
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: ExpCheckTest Application
ProductVersion: 1, 0, 0, 1
FileDescription: ExpCheckTest MFC Application
OriginalFilename: ExpCheckTest.EXE
Translation: 0x0409 0x04b0

Backdoor.Win32.Emotet.cajo also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Emotet.1000
MicroWorld-eScan	Trojan.GenericKD.34363633
FireEye	Trojan.GenericKD.34363633
CAT-QuickHeal	Trojan.CKGENERIC
ALYac	Trojan.GenericKD.34363633
Malwarebytes	Trojan.MalPack.TRE
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Trojan.GenericKD.34363633
K7GW	Trojan ( 0056c87c1 )
K7AntiVirus	Trojan ( 0056c87c1 )
TrendMicro	TrojanSpy.Win32.EMOTET.THHAEBO
Cyren	W32/Emotet.APS.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:BankerX-gen [Trj]
ClamAV	Win.Packed.Emotet-9371538-0
Kaspersky	Backdoor.Win32.Emotet.cajo
Alibaba	Trojan:Win32/Emotet.0d50d807
ViRobot	Trojan.Win32.Emotet.188416.B
Rising	Trojan.Emotet!8.B95 (CLOUD)
Ad-Aware	Trojan.GenericKD.34363633
Comodo	.UnclassifiedMalware@0
F-Secure	Trojan.TR/Crypt.Agent.mcjks
Zillya	Backdoor.Emotet.Win32.1035
Sophos	Troj/Emotet-CLB
Ikarus	Trojan-Banker.Emotet
Jiangmin	Backdoor.Emotet.qv
Avira	TR/Crypt.Agent.mcjks
MAX	malware (ai score=83)
Antiy-AVL	Trojan[Backdoor]/Win32.Emotet
Microsoft	Trojan:Win32/Emotet.ARJ!MTB
Arcabit	Trojan.Generic.D20C58F1
ZoneAlarm	Backdoor.Win32.Emotet.cajo
GData	Trojan.GenericKD.34363633
Cynet	Malicious (score: 85)
AhnLab-V3	Trojan/Win32.Emotet.R348051
McAfee	Emotet-FQS!10931A3C520D
TACHYON	Backdoor/W32.Emotet.188416
VBA32	Backdoor.Emotet
Cylance	Unsafe
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Kryptik.HFMZ
TrendMicro-HouseCall	TrojanSpy.Win32.EMOTET.THHAEBO
Tencent	Malware.Win32.Gencirc.10cde85d
Fortinet	W32/Kryptik.HCEJ!tr
AVG	Win32:BankerX-gen [Trj]
Paloalto	generic.ml

How to remove Backdoor.Win32.Emotet.cajo?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Backdoor.Win32.Emotet.cajo information