Should I remove “Troj/Emotet-CQG”?

The Troj/Emotet-CQG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Troj/Emotet-CQG virus can do?

• Executable code extraction
• Creates RWX memory
• Mimics the system’s user agent string for its own requests
• Expresses interest in specific running processes
• HTTP traffic contains suspicious features which may be indicative of malware related traffic
• Performs some HTTP requests
• The binary likely contains encrypted or compressed data.
• Anomalous binary characteristics

How to determine Troj/Emotet-CQG?

File Info:
crc32: 6A53DB05
md5: e31f054211d55a030ec362f628ae8833
name: y2HXcGLRk4A.exe
sha1: 18202d836a5163e08c3ea28e11e422430fc9c36f
sha256: 1a59ad2fcbdba548484047fd4dc588979d51e6c0eef95e4e20b94e133d9623b5
sha512: db50b52a8f9cc1d5ef79238ebf7b6fff73a395b9d3ff8f60484b578af601d27e464eaf5b13bb887765651bfa7cee1ebb3811d7e2c7a3c982209336ee71510c8a
ssdeep: 3072:StarCik/dmeL14J8XhIcc5ovu3px5QmlILI1Fo2rKFtvfPlAx2opr6DlU:StazQdDL146Xmum3pvQmcI1qBPG9Qh
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Troj/Emotet-CQG also known as:

How to remove Troj/Emotet-CQG?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.