Malware

Generic.EmotetAC.2320920D removal tips

Malware Removal

The Generic.EmotetAC.2320920D is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.EmotetAC.2320920D virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Mimics the system’s user agent string for its own requests
  • Expresses interest in specific running processes
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Japanese
  • The binary likely contains encrypted or compressed data.
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generic.EmotetAC.2320920D?


File Info:

crc32: 663E4F00
md5: 70d430dcada7fd1897a76e794933cb49
name: 70D430DCADA7FD1897A76E794933CB49.mlw
sha1: 8af5dea32eb467bbba7133e359f582eac12921f2
sha256: e0b22bde627814be598a617128a167223d73f4422b9f3108426ca8193cb459ce
sha512: 1f894467de534062c749b1d6289c185d19755e0d76e824f02347c2f561880b016d88b2631a57f111ad03aec1bf3085f5871e07eb4b8289143f02a08f5c7ca38b
ssdeep: 3072:RMBg+0JAtMzxiiFpDXDX8uXsu21zIl/36FZUGgfNI2/:RMByqOz8+8uXsuA9arfNr
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.EmotetAC.2320920D also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
DrWebTrojan.Emotet.1046
MicroWorld-eScanDeepScan:Generic.EmotetAC.2320920D
FireEyeDeepScan:Generic.EmotetAC.2320920D
ALYacDeepScan:Generic.EmotetAC.2320920D
BitDefenderDeepScan:Generic.EmotetAC.2320920D
CyrenW32/Emotet.AVY.gen!Eldorado
SymantecTrojan.Emotet
APEXMalicious
AvastWin32:BankerX-gen [Trj]
ClamAVWin.Dropper.Emotet-9784075-0
KasperskyHEUR:Trojan.Win32.Zenpak.gen
RisingTrojan.Kryptik!1.CE19 (CLASSIC)
Ad-AwareDeepScan:Generic.EmotetAC.2320920D
McAfee-GW-EditionGenericRXMK-KX!70D430DCADA7
EmsisoftTrojan.Emotet (A)
IkarusTrojan-Banker.Emotet
MAXmalware (ai score=83)
MicrosoftTrojan:Win32/EmotetCrypt.ARJ!MTB
ArcabitDeepScan:Generic.EmotetAC.D236A18D
ZoneAlarmHEUR:Trojan.Win32.Zenpak.gen
GDataDeepScan:Generic.EmotetAC.2320920D
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.Generic.C4211367
McAfeeGenericRXMK-KX!70D430DCADA7
MalwarebytesTrojan.MalPack.TRE
ESET-NOD32a variant of Win32/Kryptik.HHAR
FortinetW32/Emotet.AMH!tr
MaxSecureWin.MxResIcn.Heur.Gen
AVGWin32:BankerX-gen [Trj]
Qihoo-360HEUR/QVM08.0.38DF.Malware.Gen

How to remove Generic.EmotetAC.2320920D?

Generic.EmotetAC.2320920D removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment