About “Backdoor.Win32.Emotet.cjqs” infection

The Backdoor.Win32.Emotet.cjqs is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Emotet.cjqs virus can do?

• Executable code extraction
• Creates RWX memory
• Mimics the system’s user agent string for its own requests
• Expresses interest in specific running processes
• Attempts to modify proxy settings

How to determine Backdoor.Win32.Emotet.cjqs?

File Info:
crc32: B11EBEC5
md5: 4b167c8fb02db363cef31489f369d7df
name: o.exe
sha1: caa2b5e9b2d504bbd25b33a9b6f6f9ef88dd534f
sha256: cf26668f269bc1ddb15f014e0c78e0fd5a4efde2f9f19cb061408ca621b62bef
sha512: aa529b81765c8c094e9146c4c6fcaf9d0c88625646bbc7d53f3792c6c478c444b9b199dbce3fb1f78329d52c09aeac8c492fd72f1829d12becd4c3a379a26254
ssdeep: 12288:h5q4Q0ti//RlGGxk4AJbXNFJ7701hTosztGGM:Xq70o/Rljk4AdNL70/93M
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2001
InternalName: TestMfc
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: TestMfc Application
ProductVersion: 1, 0, 0, 1
FileDescription: TestMfc MFC Application
OriginalFilename: TestMfc.EXE
Translation: 0x0409 0x04b0

Backdoor.Win32.Emotet.cjqs also known as:

How to remove Backdoor.Win32.Emotet.cjqs?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.