Trojan

Trojan.Agent.CQLQ malicious file

Malware Removal

The Trojan.Agent.CQLQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.CQLQ virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan.Agent.CQLQ?


File Info:

crc32: F7F96249
md5: 9482ed7755b6eea4f4d619eedf10e237
name: 9482ED7755B6EEA4F4D619EEDF10E237.mlw
sha1: 6960145b98da3a312455e2e5340f8d4387ec4771
sha256: dd68abe7c5cd80b979f9fdd1cca8415cfc259a3f391eca30832c9651c540970c
sha512: e060dee02f40e1eb19e634d0c9ee26364f43bbb294433e906898d492ad858075b36cc22cd86d199f3e99682fe46ee88e4af2bd886f265ab55e3cea299cf9b7b6
ssdeep: 12288:nYS6tmeVHiJEZ7zaNSg9OKNVWNX0P6wNsoeSB:YSumeVH/ZYSg91yNkCwj7
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 1997-2010 Kaspx435rsky Lab ZAO.
1: Kaspx435rskyx2122 Anti-Virus xae is registered trademark of Kaspx435rsky Lab ZAO.
FileVersion: 7.1.7.7
CompanyName: Kaspx435rskyx2122 Ax45cx403x405JVirus xae is registered trademark of Kaspx435rsky Lab ZAO.
Translation: 0x0409 0x04b0

Trojan.Agent.CQLQ also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Agent.CQLQ
FireEyeGeneric.mg.9482ed7755b6eea4
McAfeeGenericRXDE-YW!9482ED7755B6
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Multi.Generic.4!c
K7AntiVirusTrojan ( 0052ef101 )
BitDefenderTrojan.Agent.CQLQ
K7GWTrojan ( 0052ef101 )
Cybereasonmalicious.755b6e
CyrenW32/Trojan.CGI.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.Regsup.evalzr
RisingDownloader.Nymaim!8.781 (TFE:3:cuPsKx7O7GU)
Ad-AwareTrojan.Agent.CQLQ
EmsisoftTrojan.Agent.CQLQ (B)
ComodoTrojWare.Win32.Tiggre.BA@7ebd3w
F-SecureHeuristic.HEUR/AGEN.1117620
DrWebTrojan.Inject2.63105
ZillyaDownloader.Nymaim.Win32.3120
TrendMicroHT_GENKRYPTIK_GK200028.UVPM
McAfee-GW-EditionGenericRXDE-YW!9482ED7755B6
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE – Downloader
JiangminTrojan.Regsup.acr
AviraHEUR/AGEN.1117620
MAXmalware (ai score=100)
Antiy-AVLTrojan/Win32.TSGeneric
MicrosoftTrojan:Win32/Tiggre!rfn
ArcabitTrojan.Agent.CQLQ
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataTrojan.Agent.CQLQ
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Generic.C2272896
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.34804.Eq0@aKGpAJnk
ALYacTrojan.Agent.CQLQ
TACHYONTrojan/W32.Agent.495616.QU
VBA32Trojan.Regsup
MalwarebytesMalware.AI.2841973813
PandaTrj/Genetic.gen
ESET-NOD32Win32/TrojanDownloader.Nymaim.BA
TrendMicro-HouseCallHT_GENKRYPTIK_GK200028.UVPM
TencentMalware.Win32.Gencirc.10b3f9a8
YandexTrojan.GenAsa!wqNMI3qiF7o
IkarusTrojan-Downloader.Win32.Nymaim
eGambitUnsafe.AI_Score_99%
FortinetW32/Nymaim.BA!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/Trojan.605

How to remove Trojan.Agent.CQLQ?

Trojan.Agent.CQLQ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment