Categories: Malware

How to remove “Mal/Generic-R + Troj/Emotet-CWE”?

The Mal/Generic-R + Troj/Emotet-CWE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-R + Troj/Emotet-CWE virus can do?

Executable code extraction
Creates RWX memory
Mimics the system’s user agent string for its own requests
Expresses interest in specific running processes
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Attempts to modify proxy settings
Anomalous binary characteristics

How to determine Mal/Generic-R + Troj/Emotet-CWE?


File Info:
crc32: 15A4D302md5: 8be57a90db2bb8b5b0e201fe91796a57name: 8BE57A90DB2BB8B5B0E201FE91796A57.mlwsha1: 75aaf4adef9f58d0a690b7ea0ecacb375023b843sha256: 039768c31c634ee1f0b407e4bcd0b552cf1ca6e3a4612ce63d4f4e5a92cdb913sha512: 8148480a3c041d81324a0fbc2eff41f5817ee81af1a88c7b411f68f5ee81a46c4c443afc7f9c7efb1da26dc7e66980c8f19e54ee8c7eebcbb5a08d81726e55c3ssdeep: 12288:SYzchQVZnkmt/70MWugxPJZFpf0c1pHybdJrs2xnd:d4KV5Hpt8bZHL2CAtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Mal/Generic-R + Troj/Emotet-CWE also known as:

Bkav	W32.AIDetectVM.malware2
MicroWorld-eScan	Trojan.GenericKDZ.72685
McAfee	Emotet-FSN!8BE57A90DB2B
AegisLab	Trojan.Win32.Generic.l6Vk
Sangfor	Malware
K7AntiVirus	Trojan ( 005768121 )
BitDefender	Trojan.GenericKDZ.72685
K7GW	Trojan ( 005768121 )
Arcabit	Trojan.Generic.D11BED
Cyren	W32/Emotet.BAT.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.Generic-9825158-0
Kaspersky	HEUR:Trojan.Win32.Qshell.gen
Alibaba	Trojan:Win32/EmotetCrypt.dea0b2ef
Ad-Aware	Trojan.GenericKDZ.72685
Emsisoft	Trojan.Crypt (A)
DrWeb	Trojan.Emotet.1100
TrendMicro	TROJ_GEN.R002C0DAQ21
McAfee-GW-Edition	BehavesLike.Win32.Worm.jh
FireEye	Generic.mg.8be57a90db2bb8b5
Sophos	Mal/Generic-R + Troj/Emotet-CWE
Ikarus	Trojan-Banker.Emotet
Microsoft	Trojan:Win32/EmotetCrypt.PEF!MTB
ViRobot	Trojan.Win32.Emotet.624128
ZoneAlarm	HEUR:Trojan.Win32.Qshell.gen
GData	Trojan.GenericKDZ.72685
Cynet	Malicious (score: 90)
AhnLab-V3	Malware/Win32.RL_Generic.R364288
ALYac	Trojan.GenericKDZ.72685
MAX	malware (ai score=87)
Cylance	Unsafe
Panda	Trj/GdSda.A
ESET-NOD32	Win32/Emotet.CQ
TrendMicro-HouseCall	TROJ_GEN.R002C0DAQ21
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Emotet.BAT!tr
AVG	Win32:BankerX-gen [Trj]
Avast	Win32:BankerX-gen [Trj]