How to remove “Trojan-Banker.Win32.Emotet.gelg”?

The Trojan-Banker.Win32.Emotet.gelg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Banker.Win32.Emotet.gelg virus can do?

Executable code extraction
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan-Banker.Win32.Emotet.gelg?


File Info:
crc32: 1B6145E6
md5: 7a8dc4176ad15f25f05dfd4a03bb4814
name: upload_file
sha1: 30d296a859f4c4b600d39326f2d3650d915668d4
sha256: 00a7c6537848f6a23c6a909d696701d01cb4e992c560f5c85955b915454ad958
sha512: 2236bed1c7b19c6f46883c2804402729e0f5dde028dfec71d4120b819f23fc692c7150a467feaf3df7c8e91823b3ae44c7723ec30a1f399d1fe3cb48fd653e6e
ssdeep: 6144:Sr7hkhleL5b+ZTTTBx+Dqn9iin9dgn9BvirtTokDqHEPIzE/:SnrL8TTTBx+Dqn9iin9dgn9Bvifqkp
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: Aseb
FileVersion: 1.00
CompanyName: Twenty Squares
ProductName: Aseb
ProductVersion: 1.00
FileDescription: Addictedsarah chaturbate iree token
OriginalFilename: Aseb.exe

Trojan-Banker.Win32.Emotet.gelg also known as:

Bkav	W32.AIDetectVM.malware1
Cynet	Malicious (score: 85)
FireEye	Generic.mg.7a8dc4176ad15f25
McAfee	Emotet-FRN!7A8DC4176AD1
Malwarebytes	Trojan.MalPack.TRE
K7AntiVirus	Trojan ( 0056ed9c1 )
BitDefender	Trojan.Agent.EXVR
K7GW	Trojan ( 0056ed9c1 )
CrowdStrike	win/malicious_confidence_80% (W)
Invincea	Mal/Generic-R + Troj/Emotet-CRN
Cyren	W32/Emotet.AVH.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	Trojan-Banker.Win32.Emotet.gelg
Alibaba	Trojan:Win32/Injector.42ab9df1
ViRobot	Trojan.Win32.Emotet.344064.C
MicroWorld-eScan	Trojan.Agent.EXVR
Rising	Trojan.Kryptik!1.C606 (CLASSIC)
Ad-Aware	Trojan.Agent.EXVR
Sophos	Troj/Emotet-CRN
F-Secure	Trojan.TR/AD.Emotet.fszqq
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Trojan.fm
Emsisoft	Trojan.Emotet (A)
Ikarus	Trojan-Banker.Emotet
Avira	TR/AD.Emotet.fszqq
Microsoft	Trojan:Win32/EmotetCrypt.ARJ!MTB
Arcabit	Trojan.Agent.EXVR
ZoneAlarm	Trojan-Banker.Win32.Emotet.gelg
GData	Trojan.Agent.EXVR
AhnLab-V3	Trojan/Win32.Emotet.R353497
BitDefenderTheta	Gen:NN.ZevbaF.34570.vm1@aCIR7wmi
MAX	malware (ai score=86)
Cylance	Unsafe
Panda	Trj/Emotet.C
ESET-NOD32	Win32/Emotet.CI
Tencent	Win32.Trojan-banker.Emotet.Ajmb
SentinelOne	DFI – Malicious PE
Fortinet	W32/ENRF!tr
AVG	FileRepMalware

How to remove Trojan-Banker.Win32.Emotet.gelg?

Trojan-Banker.Win32.Emotet.gelg removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X