Malware

Should I remove “Troj/Emotet-CVD”?

Malware Removal

The Troj/Emotet-CVD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Troj/Emotet-CVD virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Mimics the system’s user agent string for its own requests
  • Expresses interest in specific running processes
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

How to determine Troj/Emotet-CVD?


File Info:

crc32: E7660CCC
md5: e5dd7b0185866a6a4e935665868349a3
name: E5DD7B0185866A6A4E935665868349A3.mlw
sha1: 72ec079d68c1862dedf1cc399910436abebc15da
sha256: aa892cb4407dd5fde0dfacc6f3d81e2c70b230210b56a50913a82bbb629b731b
sha512: c2b3442cc5b91f6ba0fed57afa72ec289d4b0d71cfbe329409b9d577622a2a919558de16fa993b0a8261aec2cd8ae4c2590e8e6c7fd85c47cd9bd45c16390867
ssdeep: 3072:RWoZIfMoHNG+5yXEvfrtL20RHIBTtP22OOGSu/ALLVBk9dek/fa:YlMoHN4mBLlH0tO5OG9/ALxyiKfa
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Troj/Emotet-CVD also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.72306
ALYacTrojan.GenericKDZ.72306
SangforMalware
K7AntiVirusTrojan ( 0057530f1 )
BitDefenderTrojan.GenericKDZ.72306
K7GWTrojan ( 0057530f1 )
CrowdStrikewin/malicious_confidence_80% (D)
CyrenW32/Emotet.AZU.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Backdoor.Win32.Emotet.gen
AlibabaTrojan:Win32/EmotetCrypt.c30c1bfe
Ad-AwareTrojan.GenericKDZ.72306
SophosTroj/Emotet-CVD
F-SecureTrojan.TR/AD.Emotet.fyg
DrWebTrojan.Emotet.1068
McAfee-GW-EditionBehavesLike.Win32.Emotet.cc
FireEyeGeneric.mg.e5dd7b0185866a6a
EmsisoftTrojan.GenericKDZ.72306 (B)
IkarusTrojan-Banker.Emotet
JiangminBackdoor.Emotet.vo
AviraTR/AD.Emotet.fyg
MAXmalware (ai score=85)
Antiy-AVLTrojan[Backdoor]/Win32.Emotet
MicrosoftTrojan:Win32/EmotetCrypt.SS!MTB
GridinsoftRansom.Win32.Wacatac.oa!s1
ArcabitTrojan.Generic.D11A72
ZoneAlarmHEUR:Backdoor.Win32.Emotet.gen
GDataTrojan.GenericKDZ.72306
CynetMalicious (score: 100)
McAfeeEmotet-FRR!E5DD7B018586
VBA32Trojan.Emotet
MalwarebytesTrojan.Emotet
ESET-NOD32a variant of Win32/GenKryptik.EZHK
SentinelOneStatic AI – Malicious PE
FortinetW32/Kryptik.HILQ!tr
AVGWin32:MalwareX-gen [Trj]
PandaTrj/GdSda.A
Qihoo-360Generic/Trojan.0e0

How to remove Troj/Emotet-CVD?

Troj/Emotet-CVD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment