MemScan:Trojan.Agent.DQQO (B) removal tips

The MemScan:Trojan.Agent.DQQO (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MemScan:Trojan.Agent.DQQO (B) virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine MemScan:Trojan.Agent.DQQO (B)?


File Info:
name: 7A5AFECCE8877BEA6E10.mlw
path: /opt/CAPEv2/storage/binaries/8fa3e3074513632548e7ae4c170db60384b282cdcfe7ee3497954f9334f1bcf5
crc32: F39A7221
md5: 7a5afecce8877bea6e10a195967e92e2
sha1: cde9d2a52ef0c22b5e31d25b17f7f71a2d7e18ce
sha256: 8fa3e3074513632548e7ae4c170db60384b282cdcfe7ee3497954f9334f1bcf5
sha512: b139e3465e1663442fb2c44d2ea97d34eb7d143287d41324b8f9ce1f7bbb7483cb75b4e48f6d9e92a715958c2becb26ecfecbbaa01d9896bb85f063706f5de98
ssdeep: 6144:mMWjrOY9C81NByvZ6Mxv5Rar3O6B9fZSLhZmzbBy9:mM+B9C8HByvNv54B9f01ZmHBy9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BD448C1B3AEA5E72CF680EF0592D915C54189D28FF26E9BE50C6C039F9E673BC22504D
sha3_384: 16924ec18b7f6661c0741d71b07c7e51142d7174835976eeff5f36cccd7e204b67d9f51d85a71704e4c3087dfeae1ba2
ep_bytes: 60909090909067e80000000090909058
timestamp: 2023-04-07 03:39:59

Version Info:
0: [No Data]

MemScan:Trojan.Agent.DQQO (B) also known as:

Bkav	W32.AIDetectMalware
tehtris	Generic.Malware
MicroWorld-eScan	MemScan:Trojan.Agent.DQQO
FireEye	Generic.mg.7a5afecce8877bea
CAT-QuickHeal	Worm.Dorkbot.A
ALYac	MemScan:Trojan.Agent.DQQO
Malwarebytes	Padodor.Backdoor.Bot.DDS
VIPRE	MemScan:Trojan.Agent.DQQO
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005780dd1 )
K7GW	Trojan ( 005780dd1 )
Cybereason	malicious.52ef0c
Cyren	W32/Agent.FTJ.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Spy.Qukart
APEX	Malicious
ClamAV	Win.Trojan.Crypted-36
Kaspersky	Backdoor.Win32.Padodor.gen
BitDefender	MemScan:Trojan.Agent.DQQO
NANO-Antivirus	Trojan.Win32.Padodor.foufls
Avast	Win32:BackdoorX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10be9266
Emsisoft	MemScan:Trojan.Agent.DQQO (B)
F-Secure	Trojan.TR/Crypt.XDR.Gen
DrWeb	BackDoor.HangUp.5
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
Trapmine	malicious.high.ml.score
Sophos	Troj/Padodor-M
SentinelOne	Static AI – Malicious PE
GData	MemScan:Trojan.Agent.DQQO
Jiangmin	Backdoor.Padodor.esbt
Google	Detected
Avira	TR/Crypt.XDR.Gen
MAX	malware (ai score=84)
Antiy-AVL	Trojan[Proxy]/Win32.Qukart.gen
Arcabit	Trojan.Agent.DQQO
ZoneAlarm	Backdoor.Win32.Padodor.gen
Microsoft	Trojan:Win32/Vindor!pz
Cynet	Malicious (score: 100)
AhnLab-V3	Win-Trojan/Berbew.51712
Acronis	suspicious
McAfee	Trojan-FVOK!7A5AFECCE887
TACHYON	Backdoor/W32.Padodor
VBA32	Backdoor.Padodor
Cylance	unsafe
Panda	Trj/Genetic.gen
Rising	Backdoor.Berbew!1.AF13 (CLASSIC)
Yandex	Backdoor.Padodor.AF
Ikarus	Backdoor.Win32.Padodor
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Qukart.A!tr
BitDefenderTheta	AI:Packer.2690678D1E
AVG	Win32:BackdoorX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove MemScan:Trojan.Agent.DQQO (B)?

MemScan:Trojan.Agent.DQQO (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X