Trojan

Trojan-Banker.Win32.Emotet.fkun removal guide

Malware Removal

The Trojan-Banker.Win32.Emotet.fkun is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Banker.Win32.Emotet.fkun virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Mimics the system’s user agent string for its own requests
  • Expresses interest in specific running processes
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests

How to determine Trojan-Banker.Win32.Emotet.fkun?


File Info:

crc32: 02A50799
md5: 0b4cec77db884e558be54bb5a0c5559d
name: upload_file
sha1: a87815ee9132d15ac96a93a39b7e593c05fb02ca
sha256: 7c06788b885d80a6e7d1c4638f054c681a24b847927026d622c1aa4c17748cf5
sha512: f41ce94c4e9d04868603f7c152edfa92714c6c1857d3c25fc095c5c92631d25cc13b4bda97402249af32e7c2c755ae4e2ee8d116e81beeac5b57a5d360e95139
ssdeep: 6144:OHJ5vy3kkDQg6p28Ca/cspQO9jeUX/V3RbNUXXg3uxYHH8x0HvHg0c:SkN+1/cspQO9jxVUgKY8eHgJ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2002
InternalName: TabDrives
FileVersion: 1, 0, 0, 1
CompanyName:
LegalTrademarks:
ProductName: TabDrives Application
ProductVersion: 1, 0, 0, 1
FileDescription: TabDrives MFC Application
OriginalFilename: TabDrives.EXE
Translation: 0x0409 0x04b0

Trojan-Banker.Win32.Emotet.fkun also known as:

MicroWorld-eScanTrojan.Agent.EUJD
FireEyeGeneric.mg.0b4cec77db884e55
ALYacTrojan.Agent.EUJD
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Emotet.L!c
BitDefenderTrojan.Agent.EUJD
K7GWTrojan ( 0056bb0a1 )
Invinceaheuristic
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
GDataTrojan.Agent.EUJD
KasperskyTrojan-Banker.Win32.Emotet.fkun
RisingTrojan.Kryptik!1.C80B (CLOUD)
Ad-AwareTrojan.Agent.EUJD
EmsisoftTrojan.Agent.EUJD (B)
F-SecureTrojan.TR/Kryptik.ynipf
DrWebTrojan.Emotet.997
TrendMicroTROJ_GEN.R03FC0DH120
SophosTroj/Emotet-CKN
IkarusTrojan.Win32.Krypt
CyrenW32/Trojan.NUVX-0838
AviraTR/Kryptik.ynipf
Endgamemalicious (high confidence)
ArcabitTrojan.Agent.EUJD
ZoneAlarmTrojan-Banker.Win32.Emotet.fkun
MicrosoftTrojan:Win32/Emotet.ARJ!MTB
AhnLab-V3Malware/Win32.Generic.C4173826
McAfeeGenericRXAA-FA!0B4CEC77DB88
TACHYONTrojan/W32.Agent.638976.QX
VBA32BScope.Trojan.Emotet
MalwarebytesTrojan.MalPack.TRE
ESET-NOD32a variant of Win32/Kryptik.HFHN
TrendMicro-HouseCallTROJ_GEN.R03FC0DH120
FortinetW32/GenKryptik.EPAZ!tr
AVGWin32:BankerX-gen [Trj]
PandaTrj/Genetic.gen
Qihoo-360Win32/Trojan.881

How to remove Trojan-Banker.Win32.Emotet.fkun?

Trojan-Banker.Win32.Emotet.fkun removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment