Categories: Malware

MSIL/PSW.Agent.QQW removal instruction

The MSIL/PSW.Agent.QQW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/PSW.Agent.QQW virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine MSIL/PSW.Agent.QQW?


File Info:
crc32: FA0780E7md5: e0efb2d055fc8e99f0c812c1a20322caname: svhost.exesha1: 6c08661de1d2df963add4a457e26e8163a7472a7sha256: 2695f1b67015c87702cccf43a101f0b2fc4e12f3e2bf3ad0d262871750089f46sha512: 9415710d70d3db9fc54179088e9f6fafb20fb386c51e4b1c7ac1793646c305fd08708ef5a96d33d31ef461df1f80a24d03c1d9ca33fdc7d77b5372d2a880721fssdeep: 6144:fDKW1Lgbdl0TBBvjc/mvZzHjEP4pBemJA:7h1Lk70TnvjcOvZjfJAtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: xa9x41ax43ex440x43fx43ex440x430x446x438x44f x41cx430x439x43ax440x43ex441x43ex444x442.x412x441x435 x43fx440x430x432x430 x437x430x449x438x449x435x43dx44b.Assembly Version: 2.7.5.0InternalName: svhost.exeFileVersion: 2.7.5.0CompanyName: Microsoft CorporationComments: x425x43ex441x442-x43fx440x43ex446x435x441x441 x434x43bx44f x441x43bx443x436x431 WindowsProductName: x41ex43fx435x440x430x446x438x43ex43dx43dx430x44f x441x438x441x442x435x43cx430 Microsoftxae WindowsxaeProductVersion: 2.7.5.0FileDescription: x425x43ex441x442-x43fx440x43ex446x435x441x441 x434x43bx44f x441x43bx443x436x431 WindowsOriginalFilename: svhost.exe

MSIL/PSW.Agent.QQW also known as:

MicroWorld-eScan	Trojan.GenericKD.31350068
CAT-QuickHeal	Trojan.IGENERIC
McAfee	RDN/Ransom
Cylance	Unsafe
BitDefender	Trojan.GenericKD.31350068
K7GW	Password-Stealer ( 00529f421 )
K7AntiVirus	Password-Stealer ( 00529f421 )
TrendMicro	TROJ_GEN.R004C0RKC18
Symantec	Trojan.Gen.2
TrendMicro-HouseCall	TROJ_GEN.R004C0RKC18
Paloalto	generic.ml
GData	Trojan.GenericKD.31350068
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Generic.fkgjxd
Rising	Stealer.Agent!8.C2 (CLOUD)
Ad-Aware	Trojan.GenericKD.31350068
Sophos	Troj/Ransom-EWQ
Comodo	Malware@#1unxnlrjl8jmw
F-Secure	Trojan.GenericKD.31350068
Zillya	Trojan.Evital.Win32.204
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dc
Trapmine	malicious.high.ml.score
Emsisoft	Trojan.GenericKD.31350068 (B)
SentinelOne	static engine – malicious
Cyren	W32/Trojan.SDZM-6131
Webroot	W32.Trojan.Malex.E
Avira	HEUR/AGEN.1037708
Antiy-AVL	Trojan[Banker]/MSIL.Evital
Microsoft	Trojan:Win32/Tiggre!rfn
Endgame	malicious (high confidence)
ZoneAlarm	HEUR:Trojan.Win32.Generic
AhnLab-V3	Malware/Win32.Generic.C2817391
Acronis	suspicious
ALYac	Trojan.GenericKD.31350068
Malwarebytes	Trojan.MalPack.Generic
Panda	Trj/CI.A
Arcabit	Trojan.Generic.D1DE5D34
ESET-NOD32	a variant of MSIL/PSW.Agent.QQW
Tencent	Win32.Trojan.Generic.Akpb
Yandex	Trojan.PWS.Evital!
Ikarus	Trojan.MSIL.PSW
Fortinet	W32/Ransom.EWQ!tr
AVG	Win32:Trojan-gen
Cybereason	malicious.055fc8
Avast	Win32:Trojan-gen
CrowdStrike	malicious_confidence_100% (W)
Qihoo-360	Win32/Trojan.c8d