Backdoor.Win32.Emotet.cjqj information

The Backdoor.Win32.Emotet.cjqj is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Emotet.cjqj virus can do?

Executable code extraction
Creates RWX memory
Mimics the system’s user agent string for its own requests
Expresses interest in specific running processes
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Backdoor.Win32.Emotet.cjqj?


File Info:
crc32: EC8DE8F8
md5: 70283901fce8a4fe846f99544e0fb126
name: oc1de00048.exe
sha1: 6ca12c3898c74162d073b74614f00a5e210ef7ce
sha256: 6a6780822e1485c42e94072c698a4974030177cdbdba30b85b67e820018ab6ea
sha512: 5e146345e85e8fe045d74a90c162f4f073497eea793608dab91c795a7b08a875784e5224cde9682de825c71d443d926f385fca1270c87d2398976d3ae096f245
ssdeep: 6144:SK6RPtfYgdMzuhM7I0GgaFM6OvlUMYxGF9X:SKA1fYgauII0Ggam2MN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2003-2008 Hans Dietrich
FileVersion: 1, 2, 0, 1
ProductName: XBrowseForFolderTest
E-mail: hdietrich@gmail.com
ProductVersion: 1, 2, 0, 1
FileDescription: XBrowseForFolderTest
Article: http://www.codeproject.com/KB/dialog/XBrowseForFolder.aspx
OriginalFilename: XBrowseForFolderTest.exe
Translation: 0x0409 0x04b0

Backdoor.Win32.Emotet.cjqj also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.69579
FireEye	Generic.mg.70283901fce8a4fe
CAT-QuickHeal	Trojan.CKGENERIC
McAfee	Emotet-FRV!70283901FCE8
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Emotet.L!c
BitDefender	Trojan.GenericKDZ.69579
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Cyren	W32/Emotet.AQO.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Dropper.Emotet-9427355-0
Kaspersky	Backdoor.Win32.Emotet.cjqj
Alibaba	Trojan:Win32/Emotet.ecd38944
NANO-Antivirus	Trojan.Win32.Emotet.hsivue
Rising	Trojan.Kryptik!8.8 (CLOUD)
Ad-Aware	Trojan.GenericKDZ.69579
Sophos	Troj/Emotet-CLK
DrWeb	Trojan.Emotet.1003
Zillya	Trojan.Emotet.Win32.24748
TrendMicro	TROJ_GEN.R002C0DHK20
Emsisoft	Trojan.GenericKDZ.69579 (B)
Jiangmin	Backdoor.Emotet.se
MaxSecure	Trojan.Malware.105527950.susgen
MAX	malware (ai score=88)
Antiy-AVL	Trojan/Win32.Emotet
Microsoft	Trojan:Win32/Emotet.PED!MTB
Arcabit	Trojan.Generic.D10FCB
ZoneAlarm	Backdoor.Win32.Emotet.cjqj
GData	Win32.Trojan.PSE.1CDBGKB
AhnLab-V3	Trojan/Win32.Emotet.C4183466
ALYac	Trojan.GenericKDZ.69579
VBA32	BScope.Trojan.Hynamer
Malwarebytes	Trojan.Emotet
Panda	Trj/Genetic.gen
ESET-NOD32	Win32/Emotet.CD
TrendMicro-HouseCall	TROJ_GEN.R002C0DHK20
Tencent	Malware.Win32.Gencirc.10cde9cb
Ikarus	Trojan-Banker.Emotet
Fortinet	W32/Kryptik.HCEJ!tr
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen
Qihoo-360	Win32/Backdoor.5a8

How to remove Backdoor.Win32.Emotet.cjqj?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Backdoor.Win32.Emotet.cjqj information