Categories: Malware

MalCert-S.CQ (A) removal tips

The MalCert-S.CQ (A) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MalCert-S.CQ (A) virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Creates a hidden or system file
  • Attempts to create or modify system certificates
  • Anomalous binary characteristics

Related domains:

i.imgur.com

How to determine MalCert-S.CQ (A)?


File Info:

crc32: 140DE48Fmd5: 60d1abd05c1ba955d167bdc1118018b4name: upload_filesha1: ffc97fcf9611a0fe880cbaffff1be1d6fbf60fb1sha256: 4da8564def807d49cf9d45fcad3e9201344732a49aea4261ab05b8b43cb3adaesha512: 8ffdfb56e5e4f98fdea66b64876e584a5c2547fb1890969de6053421ae4e7408bdb93d5fb68f0edb0149974783b0d320c76b00ec0f7903570c5102df3441b97essdeep: 24576:4I+nN/3iMvbMVqGtWdne/F9kG8Mlp++kFvSsfVU:4I+nByMp9eweyzfVUtype: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

LegalCopyright: InternalName: WinLicenseFileVersion: 3.3.2.2CompanyName: WinLicenseLegalTrademarks: Comments: ProductName: ProductVersion: 1.1.1.2FileDescription: Professional Software ProtectionOriginalFilename: Translation: 0x400a 0x04e4

MalCert-S.CQ (A) also known as:

DrWeb BackDoor.Rat.293
MicroWorld-eScan Trojan.GenericKD.44149497
McAfee Artemis!60D1ABD05C1B
VIPRE Trojan.Win32.Generic!BT
BitDefender Trojan.GenericKD.44149497
Arcabit Trojan.Generic.D2A1AAF9
Invincea Mal/Generic-S
Symantec Trojan.Gen.2
ESET-NOD32 a variant of Win32/GenCBL.BZ
Kaspersky HEUR:Backdoor.Win32.Konus.gen
Alibaba Backdoor:Win32/GenCBL.55521ad3
Ad-Aware Trojan.GenericKD.44149497
Emsisoft MalCert-S.CQ (A)
Comodo fls.noname@0
F-Secure Trojan.TR/Bulta.nclqo
McAfee-GW-Edition Artemis!Trojan
FireEye Trojan.GenericKD.44149497
Sophos Mal/Generic-S
Avira TR/Bulta.nclqo
Microsoft TrojanDownloader:O97M/Obfuse.TB!MTB
ZoneAlarm HEUR:Backdoor.Win32.Konus.gen
GData Trojan.GenericKD.44149497
ALYac Trojan.GenericKD.44149497
MAX malware (ai score=83)
VBA32 BScope.Backdoor.Rat
Ikarus Trojan.Win32.Gencbl
Fortinet W32/GenCBL.BZ!tr
Webroot W32.Trojan.Gen
AVG Win32:DangerousSig [Trj]
Avast Win32:DangerousSig [Trj]
Qihoo-360 Win32/Trojan.9ad

How to remove MalCert-S.CQ (A)?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

SpamTool.HackTool.SpamBot.DDS malicious file

The SpamTool.HackTool.SpamBot.DDS is considered dangerous by lots of security experts. When this infection is active,…

55 seconds ago

UDS:Trojan-Downloader.Win32.Agent.xxzvud removal

The UDS:Trojan-Downloader.Win32.Agent.xxzvud is considered dangerous by lots of security experts. When this infection is active,…

6 mins ago

Malware.AI.406487220 malicious file

The Malware.AI.406487220 is considered dangerous by lots of security experts. When this infection is active,…

13 mins ago

Trojan.PWS.OnlineGames.KDXA information

The Trojan.PWS.OnlineGames.KDXA is considered dangerous by lots of security experts. When this infection is active,…

57 mins ago

Trojan:Win32/Koutodoor!pz removal tips

The Trojan:Win32/Koutodoor!pz is considered dangerous by lots of security experts. When this infection is active,…

57 mins ago

About “Trojan:Win32/Regrun!pz” infection

The Trojan:Win32/Regrun!pz is considered dangerous by lots of security experts. When this infection is active,…

58 mins ago