Troj/MSIL-QAR (file analysis)

The Troj/MSIL-QAR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Troj/MSIL-QAR virus can do?

How to determine Troj/MSIL-QAR?


File Info:
crc32: 7F2E68F3
md5: 1ca9f9dc90246f83a3f7de2d89e5b47e
name: upload_file
sha1: 10eb5fb7c2d9945699274f338a7381bf8090fe8e
sha256: a4e80238413d4575a73494c1cff19bb969eb003e645b1b1894dfad8528410a59
sha512: 3eb228ca552b7e520b5b024b4b0c64b95e99b1f48aa8d8247f83dfcf48d9ca2193e5b6231a9e236f1008061c243387c3a976707a9fecc751491e2f24033fd31a
ssdeep: 12288:AkfaN0Ifkg+tAw8snZvajSzxTWwZEoKjKyvUyePMWLNd:l6fkgij8GvNFWz8yePM0d
type: RAR archive data, v1d, os: Win32

Version Info:
0: [No Data]

Troj/MSIL-QAR also known as:

DrWeb	Trojan.DownLoader35.8102
MicroWorld-eScan	Gen:Heur.MSIL.Burkina.1
FireEye	Gen:Heur.MSIL.Burkina.1
CAT-QuickHeal	Trojan.Multi
McAfee	RDN/AgentTesla
Malwarebytes	Spyware.AgentTesla
AegisLab	Trojan.MSIL.Agensla.i!c
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Invincea	Mal/Generic-R + Troj/MSIL-QAR
BitDefenderTheta	Gen:NN.ZemsilCO.34590.Lm0@aaNcUql
TrendMicro-HouseCall	TROJ_FRS.0NA103JQ20
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefender	Gen:Heur.MSIL.Burkina.1
Rising	Trojan.GenKryptik!8.AA55 (TFE:D:3aDR6wxS2SC)
Sophos	Troj/MSIL-QAR
Comodo	Malware@#1655aypvgixqw
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_FRS.0NA103JQ20
McAfee-GW-Edition	BehavesLike.Trojan.hc
Emsisoft	Gen:Heur.MSIL.Burkina.1 (B)
Ikarus	Trojan.SuspectCRC
Microsoft	Trojan:MSIL/NanoBot!MSR
Arcabit	Trojan.MSIL.Burkina.1
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Agensla.gen
GData	Win32.Trojan-Stealer.AgentTesla.D3XI2T
AhnLab-V3	Trojan/Win32.Wacatac.R353932
VBA32	TScope.Trojan.MSIL
ESET-NOD32	a variant of MSIL/Kryptik.YIW
Tencent	Msil.Trojan-qqpass.Qqrob.Ebhp
Yandex	Trojan.AvsArher.bSIdr7
MAX	malware (ai score=82)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Malicious_Behavior.SB
AVG	Win32:PWSX-gen [Trj]
Panda	Trj/GdSda.A

How to remove Troj/MSIL-QAR?

Troj/MSIL-QAR removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X