What is EmangEloh.exe?

EmangEloh.exe is usually located in the 'c:\users\%USERNAME%\appdata\roaming\microsoft\windows\start menu\programs\startup\' folder.

Some of the anti-virus scanners at VirusTotal detected EmangEloh.exe.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

VirusTotal report

51 of the 57 anti-virus programs at VirusTotal detected the EmangEloh.exe file. That's a 89% detection rate.

Scanner	Detection Name
Ad-Aware	Win32.Worm.Brontok.BI
Agnitum	Trojan.Agent!8q1xMgRAeEQ
AhnLab-V3	Win-Trojan/Agent2.32768.AF
ALYac	Win32.Worm.Brontok.BI
Avast	Win32:VB-BQD [Wrm]
AVG	Worm/VB.BBGW
Avira	WORM/VB.CZ.14.A
AVware	Trojan.Win32.Generic!BT
Baidu-International	Worm.Win32.VB.uoo
BitDefender	Win32.Worm.Brontok.BI
Bkav	W32.MoonLightCP.Worm
CAT-QuickHeal	Worm.VB.cz.nw2
ClamAV	Worm.VB-89
Comodo	Worm.Win32.NoonLight.B
Cyren	W32/Worm.KYPY-0738
DrWeb	Trojan.MulDrop.59624
Emsisoft	Win32.Worm.Brontok.BI (B)
ESET-NOD32	Win32/NoonLight.B
F-Prot	W32/Worm.AJ
F-Secure	Win32.Worm.Brontok.BI
Fortinet	W32/Bobandy.CZ!worm
GData	Win32.Worm.Brontok.BI
Ikarus	Worm.Win32.VB
Jiangmin	I-Worm/VB.acg
K7AntiVirus	Trojan ( 0000fb5b1 )
K7GW	Trojan ( 0000fb5b1 )
Kaspersky	Worm.Win32.VB.uoo
Kingsoft	Worm.VB.(kcloud)
Malwarebytes	Worm.AutoRun
McAfee	W32/MoonLight.worm
McAfee-GW-Edition	BehavesLike.Win32.Qeds.nh
Microsoft	Worm:Win32/Lightmoon.H
MicroWorld-eScan	Win32.Worm.Brontok.BI
NANO-Antivirus	Trojan.Win32.VB.crsvto
Norman	Lightmoon.Z
nProtect	Trojan/W32.Agent.35840.ES
Panda	W32/Moonlight.A.worm
Qihoo-360	Malware.Radar02.Gen
Rising	PE:Worm.VB.fa!1074044955
Sophos	W32/Bobandy-D
SUPERAntiSpyware	Trojan.Agent/Gen-Pakon
Symantec	W32.Rontokbro@mm
Tencent	Worm.Win32.VB.tk
TheHacker	W32/VB.cz
TrendMicro	WORM_MOONLIGHT.B
TrendMicro-HouseCall	WORM_MOONLIGHT.B
VBA32	Worm.VB
VIPRE	Trojan.Win32.Generic!BT
ViRobot	Worm.Win32.VB.32768[h]
Zillya	Worm.VB.Win32.2
Zoner	I-Worm.NoonLight.B

EmangEloh.exe removal instructions

The instructions below shows how to remove EmangEloh.exe with help from the FreeFixer removal tool. Basically, you install FreeFixer, scan your computer, check the EmangEloh.exe file for removal, restart your computer and scan it again to verify that EmangEloh.exe has been successfully removed. Here are the removal instructions in more detail:

1. Download and install FreeFixer: http://www.freefixer.com/download.html
2. Start FreeFixer and press the Start Scan button. The scan will finish in approximately five minutes.

   
3. When the scan is finished, locate EmangEloh.exe in the scan result and tick the checkbox next to the EmangEloh.exe file. Do not check any other file for removal unless you are 100% sure you want to delete it. Tip: Press CTRL-F to open up FreeFixer's search dialog to quickly locate EmangEloh.exe in the scan result.

   

   

   c:\users\%USERNAME%\appdata\ro..indows\start menu\programs\startup\EmangEloh.exe

   
4. Scroll down to the bottom of the scan result and press the Fix button. FreeFixer will now delete the EmangEloh.exe file.

   
5. Restart your computer.
6. Start FreeFixer and scan your computer again. If EmangEloh.exe still remains in the scan result, proceed with the next step. If EmangEloh.exe is gone from the scan result you're done.
7. If EmangEloh.exe still remains in the scan result, check its checkbox again in the scan result and click Fix.
8. Restart your computer.
9. Start FreeFixer and scan your computer again. Verify that EmangEloh.exe no longer appear in the scan result.

Filename variants

EmangEloh.exe may also use other filenames. The most common variants are listed below:

• sql.cmd

Folder name variants

EmangEloh.exe may also be located in other folders than c:\users\%USERNAME%\appdata\roaming\microsoft\windows\start menu\programs\startup\. The most common variants are listed below:

• C:\Windows\M68162\

Error Messages

• Privacy Policy