What is “Trojan.EmotetRI.S16277054”?

The Trojan.EmotetRI.S16277054 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.EmotetRI.S16277054 virus can do?

Executable code extraction
Creates RWX memory
Mimics the system’s user agent string for its own requests
Expresses interest in specific running processes
Attempts to modify proxy settings

How to determine Trojan.EmotetRI.S16277054?


File Info:
crc32: D91E95E1
md5: 77f0fee729ca062a2c2e21126d17eba7
name: 77F0FEE729CA062A2C2E21126D17EBA7.mlw
sha1: 0e3c7f90217b31d9926b1761b12b586949b5b422
sha256: 69c30ec4b7c2c65465b066bd654ff87ad92f25d1cdcc0f5ffb35bd4cbfaaa5d5
sha512: ae50cfb589233577069b914ade6560088192474d01d60e5886ba51821ee5c79102d1db822bcbc6d0b27413c2ef59dd88142e7041e7ef1ec4589787b5fa7575a3
ssdeep: 3072:kLf4IXW8r5fTgBUkDpA40arIRrtAFvlGRHiNPWvwE:iwIXxr9nkDpA0ERrqFNGRf
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2000
InternalName: ListCtrlDemo
FileVersion: 1, 0, 0, 2
CompanyName: 
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: ListCtrlDemo Application
SpecialBuild: 
ProductVersion: 1, 0, 0, 2
FileDescription: ListCtrlDemo MFC Application
OriginalFilename: ListCtrlDemo.EXE
Translation: 0x0409 0x04b0

Trojan.EmotetRI.S16277054 also known as:

Bkav	W32.EmotetDBV.Trojan
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.70560
FireEye	Trojan.GenericKDZ.70560
CAT-QuickHeal	Trojan.EmotetRI.S16277054
ALYac	Trojan.GenericKDZ.70560
K7AntiVirus	Trojan ( 0055e3b01 )
BitDefender	Trojan.GenericKDZ.70560
K7GW	Trojan ( 0055e3b01 )
Cyren	W32/Kryptik.CCJ.gen!Eldorado
Symantec	Packed.Generic.554
APEX	Malicious
Avast	Win32:CrypterX-gen [Trj]
NANO-Antivirus	Trojan.Win32.Emotet.hyvpyw
Rising	Malware.Zbot!8.E95E (TFE:3:ZyXdVehQhiU)
Ad-Aware	Trojan.GenericKDZ.70560
Emsisoft	Trojan.Emotet (A)
F-Secure	Heuristic.HEUR/AGEN.1139292
DrWeb	Trojan.Emotet.1028
Invincea	Troj/Emotet-CQJ
McAfee-GW-Edition	Artemis
Sophos	Troj/Emotet-CQJ
Ikarus	Trojan-Banker.Emotet
Avira	HEUR/AGEN.1139292
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/EmotetCrypt.AR!MTB
Gridinsoft	Trojan.Win32.Emotet.oa!s5
Arcabit	Trojan.Generic.D113A0
GData	Win32.Trojan.PSE.FRLOUT
Cynet	Malicious (score: 85)
AhnLab-V3	Trojan/Win32.Emotet.R352941
McAfee	GenericRXAA-AA!77F0FEE729CA
MAX	malware (ai score=84)
VBA32	BScope.TrojanBanker.Emotet
Malwarebytes	Trojan.MalPack.TRE
ESET-NOD32	a variant of Win32/Kryptik.HGOG
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Banker.AF44!tr
BitDefenderTheta	Gen:NN.Zextet.34634.oy0@aK8Bqxli
AVG	Win32:CrypterX-gen [Trj]
Qihoo-360	HEUR/QVM20.1.3FBB.Malware.Gen

How to remove Trojan.EmotetRI.S16277054?

Trojan.EmotetRI.S16277054 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X