Trojan

Trojan.Agent.EMOM malicious file

Malware Removal

The Trojan.Agent.EMOM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.EMOM virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Icelandic
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Agent.EMOM?


File Info:

crc32: CCD4324D
md5: f3b329b8ac25d44bb0601176df77cbb6
name: cursor.png
sha1: 8f48e946e5513485c762056133187c5abcc478ba
sha256: 1617d078729fb6f8fadf3a2c70f3df35529e6ecc0ea79073452c202db2ceadec
sha512: 927edb91c3c3f87ce307b4fa21e44a260da4de02cd97403d0e73e1559668e4a86e073b7648a851997f5c78877a09a1024d058a9a00f5cf0ffd21b782fce7c7fb
ssdeep: 12288:LlQJLcaZcJOZAX5sv60r6lUFPegdboDZlX+wLd3Co4Why:LlQJLcaZcJ0aflUBegdkDmyCVN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 1901
InternalName: Alarm
FileVersion: 1, 0, 0, 1
CompanyName:
LegalTrademarks:
ProductName: Alarm Application
ProductVersion: 1, 0, 0, 1
FileDescription: Alarm MFC Application
OriginalFilename: Alarm.EXE
Translation: 0x0409 0x04b0

Trojan.Agent.EMOM also known as:

DrWebTrojan.Trick.46529
MicroWorld-eScanTrojan.Agent.EMOM
McAfeeRDN/Generic.dx
VIPRETrojan.Win32.Generic!BT
SangforMalware
CrowdStrikewin/malicious_confidence_80% (W)
BitDefenderTrojan.Agent.EMOM
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
ArcabitTrojan.Agent.EMOM
TrendMicroTROJ_GEN.R011C0PBT20
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/TrickBot.CM
TrendMicro-HouseCallTROJ_GEN.R011C0PBT20
KasperskyTrojan-Dropper.Win32.Dapato.qdik
AlibabaTrojanDropper:Win32/Dapato.8069a11d
NANO-AntivirusTrojan.Win32.Dapato.hcrglx
RisingDropper.Dapato!8.2A2 (CLOUD)
Ad-AwareTrojan.Agent.EMOM
EmsisoftTrojan.Agent.EMOM (B)
ComodoMalware@#3b7jdrs2sxfbo
F-SecureTrojan.TR/Agent.pzect
Invinceaheuristic
McAfee-GW-EditionRDN/Generic.dx
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.f3b329b8ac25d44b
SophosMal/Generic-S
IkarusTrojan.Agent
JiangminTrojanDropper.Dapato.abem
AviraTR/Agent.pzect
FortinetW32/GenKryptik.HBLV!tr
Antiy-AVLTrojan/Win32.Wacatac
Endgamemalicious (moderate confidence)
MicrosoftTrojan:Win32/Tiggre!rfn
ZoneAlarmTrojan-Dropper.Win32.Dapato.qdik
TACHYONTrojan/W32.Agent.1007680
AhnLab-V3Trojan/Win32.Trickbot.C4002936
ALYacTrojan.Agent.EMOM
MAXmalware (ai score=84)
MalwarebytesTrojan.MalPack.TRE.Generic
PandaTrj/CI.A
APEXMalicious
TencentWin32.Trojan-dropper.Dapato.Ednf
GDataWin32.Trojan-Spy.TrickBot.EW3MV4
MaxSecureTrojan.Malware.5119110.susgen
AVGWin32:Trojan-gen
AvastWin32:Trojan-gen
Qihoo-360Generic/Trojan.56a

How to remove Trojan.Agent.EMOM?

Trojan.Agent.EMOM removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment