Categories: Malware

Mal/Emotet-Q removal guide

The Mal/Emotet-Q is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Mal/Emotet-Q virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Reads data out of its own binary image
Collects information about installed applications
Creates a hidden or system file
Creates a copy of itself
Anomalous binary characteristics

How to determine Mal/Emotet-Q?


File Info:
crc32: D8890D0Cmd5: 8f301e6bf813e0e2132b092162a23e22name: 2c.jpgsha1: 27c1537214f995094b7e4748855682afc7679767sha256: 3e98eb61e6b238064ffcecbcb974076da7839d22ee78187b764a7cbda561e8e3sha512: ffe91392d6a009f053ffb1da9914ddce8c5c1753100c210c4bff52734513d85899ceb6d8dca23855235c92d99005d82f32086e5670a455a9408cd09993e13792ssdeep: 24576:vRAcoQ7s8oT+BJ3eUsky+q7zgdiQ8HpGoJJpQAZ:vRNoQ74T0JuUskyVzgdi9rpBZtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: All rights reserved. Portrait Displays, Inc.InternalName: pdisrvcFileVersion: 2,2,22,002CompanyName: Portrait Displays, Inc.Comments: Service to facilitate ddc/ci communication with monitors.ProductName: pdisrvcProductVersion: 2,2,22,002FileDescription: pdisrvcOriginalFilename: pdisrvcTranslation: 0x0409 0x04b0

Mal/Emotet-Q also known as:

DrWeb	Trojan.Packed2.41981
MicroWorld-eScan	Trojan.GenericKD.32335510
FireEye	Generic.mg.8f301e6bf813e0e2
CAT-QuickHeal	Trojan.ShadePMF.S7451125
ALYac	Trojan.Ransom.Shade
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan ( 0053f76c1 )
BitDefender	Trojan.GenericKD.32335510
K7GW	Trojan ( 0053f76c1 )
TrendMicro	Ransom.Win32.SHADE.SMB.hp
BitDefenderTheta	Gen:NN.ZexaF.32250.ur1@aaX5Dbci
Cyren	W32/Agent.BAE.gen!Eldorado
Symantec	Packed.Generic.459
APEX	Malicious
Avast	Win32:CrypterX-gen [Trj]
ClamAV	Win.Packed.Generic-7153077-0
GData	Trojan.GenericKD.32335510
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	Trojan:Win32/Fsysna.2bddb494
NANO-Antivirus	Trojan.Win32.Fsysna.fxehko
ViRobot	Trojan.Win32.Z.Kryptik.1376944
AegisLab	Trojan.Win32.Fsysna.4!c
Rising	Trojan.Kryptik!8.8 (TFE:5:vLv2KtKx7JD)
Ad-Aware	Trojan.GenericKD.32335510
Sophos	Mal/Emotet-Q
Comodo	Malware@#2g79v5f2650h0
F-Secure	Trojan.TR/Crypt.Agent.vzdsy
Zillya	Trojan.Generic.Win32.934749
Invincea	heuristic
McAfee-GW-Edition	Trickbot-FRDP!8F301E6BF813
Emsisoft	Trojan-Ransom.Shade (A)
Ikarus	Trojan-Banker.Agent
F-Prot	W32/Agent.BAE.gen!Eldorado
Jiangmin	Trojan.Generic.dxzjq
Webroot	W32.Malware.Gen
Avira	TR/Crypt.Agent.vzdsy
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.AGeneric
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D1ED6696
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Dynamer!rfn
AhnLab-V3	Trojan/Win32.Kryptik.R289139
Acronis	suspicious
McAfee	Trickbot-FRDP!8F301E6BF813
VBA32	BScope.Malware-Cryptor.Filecoder
Cylance	Unsafe
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Kryptik.GVSR
TrendMicro-HouseCall	Ransom.Win32.SHADE.SMB.hp
Yandex	Trojan.Shade!
SentinelOne	DFI – Suspicious PE
Fortinet	W32/Kryptik.GLWT!tr
AVG	Win32:CrypterX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	HEUR/QVM10.2.8155.Malware.Gen