NSIS/TrojanDropper.Agent.CQ removal guide

The NSIS/TrojanDropper.Agent.CQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What NSIS/TrojanDropper.Agent.CQ virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine NSIS/TrojanDropper.Agent.CQ?


File Info:
crc32: BF2E0580
md5: 34597bd8d6fd56c99db5ef23f1a61924
name: glow_esp_11.22.20171.exe
sha1: fbcf6058c106f4110002875befa0fbc8e957670a
sha256: 501079482648396c40bba81e38661c35ff927a8331ce8d4d23e5e5b34b844495
sha512: af364eed28a27991b600b2bead8319d01ce5318572620e3ab2f1d0a962f70607c11b19b96a5782095355751a8823b5c0b1801cf4c67449ed613a89e1646a39b9
ssdeep: 49152:7TD/sqM5pQr+eBLVyZEaKFVAmf5eZRqg1AKpABgh2RCBZm+2j:nD/lM5pE+evqE7AmxeZJy3BgkRcZa
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
LegalCopyright: 
FileVersion: 7.0.0.0
FileDescription: GLOWESP
Translation: 0x0409 0x0000

NSIS/TrojanDropper.Agent.CQ also known as:

MicroWorld-eScan	Dropped:Trojan.GenericKD.12596301
McAfee	Artemis!34597BD8D6FD
BitDefender	Dropped:Trojan.GenericKD.12596301
K7GW	Trojan ( 0051ed981 )
K7AntiVirus	Trojan ( 0051ed981 )
Invincea	heuristic
NANO-Antivirus	Trojan.Win32.Cardinal.evccay
Symantec	Trojan.Dropper
TrendMicro-HouseCall	TROJ_GEN.R002C0OAN19
Paloalto	generic.ml
ClamAV	Win.Packed.Vmprotect-6762068-1
Kaspersky	Trojan.Win32.Phny.tv
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Phny.Ligv
Ad-Aware	Dropped:Trojan.GenericKD.12596301
Sophos	Mal/Kryptik-AT
Comodo	Malware@#23xn5rp9lmemv
F-Secure	Heuristic.HEUR/AGEN.1021653
Zillya	Trojan.GenericKD.Win32.117548
TrendMicro	TROJ_GEN.R002C0OAN19
McAfee-GW-Edition	BehavesLike.Win32.Generic.vc
Trapmine	malicious.high.ml.score
Emsisoft	Dropped:Trojan.GenericKD.12596301 (B)
SentinelOne	static engine – malicious
Cyren	W32/Trojan.BWK.gen!Eldorado
Webroot	W32.Malware.Gen
Avira	HEUR/AGEN.1021653
Fortinet	W32/Agent.CQ!tr
Antiy-AVL	Trojan/Win32.AGeneric
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.DC0344D
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Dynamer!rfn
Acronis	suspicious
VBA32	Backdoor.MSIL.Cardinal
ALYac	Dropped:Trojan.GenericKD.12596301
ESET-NOD32	NSIS/TrojanDropper.Agent.CQ
Rising	Trojan.Generic!8.C3 (CLOUD)
Yandex	Backdoor.Cardinal!
Ikarus	Trojan.MSIL.Crypt
eGambit	Unsafe.AI_Score_91%
GData	Dropped:Trojan.GenericKD.12596301
AVG	Win32:Malware-gen
Cybereason	malicious.8d6fd5
Panda	Trj/CI.A
CrowdStrike	malicious_confidence_90% (D)

How to remove NSIS/TrojanDropper.Agent.CQ?

NSIS/TrojanDropper.Agent.CQ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

NSIS/TrojanDropper.Agent.CQ removal guide